Secure Build Specs

[adfreek]

Hello,

I've been tasked with coming up with a document which proposes how to secure a base install of Windows 2000/2003 server. Things such at tightening security, services, registry. I understand 2003 is much more secure out of the box, but I was wondering if anyone has had to do this before and had some examples? We're going to be using security policie's via GPO's as well, but we want to come up with recommened specs to tighten the box post install of the OS. Registry changes? Local Polices? etc...

Anything out there?

Thanks

 

[j0rdan]

well for one, the security & administrative templates are an example of why 2003 is better... you can compare exisiting configurations to new ones and see if it will work out allright..

Regards,