Windows Admin Scripting Little Black Book- P18:This book may not be duplicated in any way without the express written consent of the publisher, except in the form of brief excerpts or quotations for the purposes of review. The information contained herein is for the personal use of the reader and may not be incorporated in any commercial programs, other books, databases, or any kind of software without written consent of the publisher. Making copies of this book or any portion for any purpose other than your own is a violation of United States copyright laws | Default server Default workstation These three basic security templates contain the standard security settings for each system. Compatible workstation or server The compatibility template contains lower security settings to allow regular users maximum control of installed applications. Applying the compatibility template will remove all users from the power users group. Dedicated domain controller The dedicated template contains security settings for domain controllers that will not be running server-based applications. Highly secure domain controller Highly secure workstation or server The high security templates provide the maximum security settings for the system. Applying this template on a Windows 2000 system will restrict that system to communicating only with other Windows 2000 systems. Secure domain controller Secure workstation or server The secure templates are the recommended security settings. Important Security Practices Here is a list of several security practices to help protect your environment Administrators should always lock their system when not in use. This should be a top priority for administrators. It takes only a few seconds of distraction for an intruder to go to work under your logged-on account. Do not allow other accounts to access or log on to an administrator s system. If another user can access your system even if you are not logged on he or she can potentially extract passwords grab your files and more. Always use the latest security patches and service pack. It seems Microsoft is always releasing security patches and service packs to combat system exploits. These patches don t do any good unless they are actually loaded onto your system. Use the maximum password length allowed. Microsoft Windows NT 2000 uses a maximum password length of 14 characters. To slow down brute-force password utilities you should always use the maximum .
