RE: Server hardening

["Chitre, Salil" <ChitreS () dnb com au>]

Hi Venky,

Try this for the Microsoft servers.

http://www.microsoft.com/downloads/details.aspx?FamilyID=8a2643c1-0685-4
d89-b655-521ea6c7b4db&DisplayLang=en

Go through the templates used for DMZ and high security servers. It will
be very helpful

Cheers,

Salil 


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of venkatesh.selvaraju () gmail com
Sent: Friday, March 20, 2009 6:04 PM
To: security-basics () securityfocus com
Subject: Server hardening

Folks,

Can someone suggest the procedures an administrator needs to follow for
hardening servers?

I understand the hardening procedures varies depending upon the role of
the server e.g Windows servers hosting exchange, sharepoint, database,
activedirectory etc.

Googling results in plethora of links on this topic but I need clear and
precise steps for better and easier understanding for implementation.
Not sure if this is the right forum to post this question. Any help you
provide is greatly appreciated.

Cheers,
Venky

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Learn all of the latest penetration testing techniques in InfoSec
Institute's Ethical Hacking class. 
Totally hands-on course with evening Capture The Flag (CTF) exercises,
Certified Ethical Hacker and Certified Penetration Tester exams, taught
by an expert with years of real pen testing experience.

http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------




------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Learn all of the latest penetration testing techniques in InfoSec Institute's Ethical Hacking class.
Totally hands-on course with evening Capture The Flag (CTF) exercises, Certified Ethical Hacker and Certified 
Penetration Tester exams, taught by an expert with years of real pen testing experience.

http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------