Windows Server 2003 Security Cookbook: Security Solutions and Scripts for System Administrators (Cookbooks (O'Reilly)) [Paperback]

Mike Danseglio (Author), Robbie Allen (Author)

Book Description

ISBN-10: 0596007531 | ISBN-13: 978-0596007539 | Publication Date: December 23, 2005 | Edition: 1

In the last few years, security has become a hot-button issue for IT organizations of all sizes. Accordingly, many of the security features that were either optional or suspect in Windows 2000 have become solid, effective fixtures in Windows Server 2003-making it the most secure operating system Microsoft has ever produced. That is, if you know how to configure it properly.

The Windows Server 2003 Security Cookbook wants to make sure that you do know how. Picking up right where its predecessor, the Windows Server Cookbook, left off, this desktop companion is focused solely on Windows Server security. It teaches you how to perform important security tasks in the Windows Server 2003 OS using specific and adaptable recipes. Each recipe features a brief description of the problem, a step-by-step solution, and then a discussion of the technology at work. Whenever possible, the authors even tell you where to look for further information on a recipe.

The book is written in a highly modular format, with each chapter devoted to one or more technologies that Windows Server 2003 provides. This approach allows you to look up a task or scenario that you want to accomplish, find that page, and read that particular recipe only. Topics include:

• System preparation and administration
• Protecting the computer at the TCP/IP level
• Applying security options to Active Directory
• Improving security on domain controllers
• Securing DHCP controllers
• Encrypting and signing network traffic using IPSec
• Patch management

If you're an intermediate or advanced system administrator who wants to feel secure when deploying Windows Server 2003 and its related services, then you don't want to be without the Windows Server 2003 Security Cookbook.

Editorial Reviews

About the Author

Mike Danseglio is a program manager in the Security Solutions group at Microsoft Corporation, and has worked in the areas of security and technology for the last decade. He holds several technical certifications including MCSE and CISSP. Mike's work includes developing and teaching extensive security training on topics such as cryptography, security technology, and attacks and countermeasures. Among his recent projects are writing security documentation for Windows XP and the Windows Server 2003 family, as well as working on a host of white papers and articles. Mike also works on security feature development for Microsoft Windows.

Robbie Allen is a Technical Leader at Cisco Systems where he has been involved in the deployment of Active Directory, DNS, DHCP, and several Network Management solutions. He enjoys working on Unix and Windows, and his favorite programming language is Perl. Robbie was named a Windows Server MVP in 2004 and 2005 for his contributions to the Windows community and publication of several popular O'Reilly books. Robbie is currently studying at MIT in the System Design and Management program.

Product Details

• Paperback: 528 pages
• Publisher: O'Reilly Media; 1 edition (December 23, 2005)
• Language: English
• ISBN-10: 0596007531
• ISBN-13: 978-0596007539
• Product Dimensions: 9.2 x 7 x 1 inches
• Shipping Weight: 1.6 pounds (View shipping rates and policies)
• Average Customer Review: 3.8 out of 5 stars  See all reviews (5 customer reviews)
• Amazon Best Sellers Rank: #1,243,027 in Books (See Top 100 in Books)

Customer Reviews

Most Helpful Customer Reviews

2 of 2 people found the following review helpful:

5.0 out of 5 stars COOKING SECURITY WITH WINDOWS SERVER 2003!!, October 4, 2006

By 

John R. Vacca "Tech Write Independent Reviewer" (Pomeroy, Ohio) - See all my reviews
(REAL NAME)   

This review is from: Windows Server 2003 Security Cookbook: Security Solutions and Scripts for System Administrators (Cookbooks (O'Reilly)) (Paperback)

Do you use Windows Server 2003 and perform security tasks as one of your primary job functions? If you do, then this book is for you! Authors Mike Danseglio and Robbie Allen, have done an outstanding job of writing a book that covers Windows Server 2003 and some amount of Windows XP security.

Danseglio and Allen, begin by setting the stage for the rest of the book by providing an introduction to Windows Server 2003 security concepts. Then, the authors show you how to secure an initial configuration. Next, they describe many techniques to help protect the computer at the TCP/IP protocol level. Then, the authors discuss how to protect local and network files with strong encryption. Next, they show you how to apply numerous options to your Active Directory forest. The authors continue by describing the use of Group Policy to configure and increase the security of both client and server computers. Then, the authors show you how to use security templates to save and deploy settings. Next, they focus on the tasks necessary to improve security on domain controllers. The authors then show you the vulnerabilities and security recipes you can use to defend against user account attacks such as password guessing or spoofing. Then, they describe how you can restrict rights and permissions to ensure that only desired users can perform specific needs. The authors continue by focusing on securing the grotesquely insecure DHCP component of Windows. Then, they describe how you can prevent several common DNS-based attacks. Next, the authors show you how to secure a file and print server, which is one of the most common uses of Windows Server 2003. The authors then discuss numerous methods that you can use to encrypt and sign network traffic using IPec. Then, they continue by covering the locking down of the much-maligned IIS. Next, the authors explore the remote access technologies of RRAS and IAS in depth, with a particular focus on improving their security. Then, they describe how you can help secure these remote access technologies, which are favorite attack vectors for evildoers. The authors then go into great detail describing how to plan, deploy, and use both PKI and certificates. They continue by showing you how to audit different types of events. Next, show you how to configure and manage event logs. Finally, they focus on and help simplify one of the most over-hyped security issues: patch management.

This most excellent book should not be considered the ultimate reference to Windows security--that's not the intention of the authors. More importantly, their intention is to provide efficient and innovative ways to complete tasks and resolve problems.

1 of 1 people found the following review helpful:

4.0 out of 5 stars Good introduction in windows security, July 26, 2008

By 

Beto Bens (Guadalupe, Nuevo Leon Mexico) - See all my reviews

This review is from: Windows Server 2003 Security Cookbook: Security Solutions and Scripts for System Administrators (Cookbooks (O'Reilly)) (Paperback)

When i bought, I have in charge a little network (150 PCs) and I dont have a lot experience about Windows 2003 Security. This help me to give me directions about how resolve several issues, but its not a book to get foundations.

1 of 1 people found the following review helpful:

5.0 out of 5 stars Recipes and formulas sorted by task domain or system service for quick and easy access, August 4, 2006

By 

Midwest Book Review (Oregon, WI USA) - See all my reviews

This review is from: Windows Server 2003 Security Cookbook: Security Solutions and Scripts for System Administrators (Cookbooks (O'Reilly)) (Paperback)

Mike Danseglio & Robbie Allen's Windows Server 2003 Security Cookbook is for the IT pro and systems administrator concerned with Windows security. Windows 2003 is much more secure than prior versions but you have to know how to set it up properly - and that's where Windows Server 2003 Security Cookbook comes in, offering recipes and formulas sorted by task domain or system service for quick and easy access. Many topics here are more advanced coverages not seen in competing titles, such as auditing and event log usage.