Additional Security Recommendations; Maximum Security Recommendations - Dell 2003 R2 x64 Edition Guía De Administración

Additional Security Recommendations

In addition to the practices mentioned in "Standard Security Recommendations," Dell recommends
the following practices to ensure security:
• Format all volumes as NTFS.
• Disable automatic log on.
• Disable the guest account.
• Do not install IIS sample applications.
• Disable parent paths.
• Move the MSADC and Scripts virtual directories from the default website to another location.
Ensure that you place appropriate restrictions on any Anonymous Logon groups. To allow UNIX
who do not have Windows user accounts to access resources on a system running Windows, you must
explicitly add the Anonymous Logon group to the Everyone group and assign the Anonymous Group
appropriate permissions.

Maximum Security Recommendations

This section provides information about practices recommended for maximum security on your
storage server.
• Allow no more than two administrators on the storage server.
• Do not allow passwords that have no expiration date.
• Enable Logon Success and Logon Failure auditing.
• Disable unnecessary services.
• Disabling unnecessary services also increases performance.
• Remove the IISADMPWD virtual directory.
• Enable application logging options for all Web and FTP sites.
• Ensure that Internet Explorer zones have secure settings for all users.
• Use the storage server only for shares and services that are actively used.
• Disable http sharing if http shares are not used.
Security Recommendations
®
users
55