|
"Windows Server 2003 takes the best of Windows Server 2000 and makes it even better with its enhanced security." |
Internet Connection Firewall (ICF), web server security and software restriction policies are some of the new features that may be the deciding factors when considering an upgrade to Windows Server 2003. Windows Server 2003 is more secure than any previous Microsoft operating system; it brings with it a dramatic increase in security and becomes more helpful to system administrators.
Unlike its predecessor, Windows Server 2000, which was wide open and relatively easy to install, Windows Server 2003 is locked-down from the start. With this lock-down in place, you are required to open up the components needed to restore functionality. These lock-downs will affect more than twenty services. These services where enabled by default in Windows 2000 server and will now either be disabled or run at a lower privilege in Windows 2003.
The two most important security changes would be that IIS and Telnet are not installed by default, and that these high-profile services run under two new accounts at a lower privilege than the System Account. This change immediately reduces exposure if a hacker compromises either service. New features such as this are designed to offer increasing levels of security and are present in most areas of the new operating system's functionality.
Once upgraded to Windows 2003 you will automatically receive Microsoft's minimal settings, these may be reconfigured later on to suit your needs. After the installation has been completed and you are up and running you may choose to start up Internet Explorer to merely surf the web or check for updates.
Once you have fired up this program, a box will appear telling you that Internet Explorer's Enhanced Security has been enabled on the server. Before you open your homepage, you are forced to enable the access, therefore making you open the vulnerabilities in your security. Internet Explorer also blocks file downloads, Active X controls, access to scripting and a host of other settings that used to be enabled by default but are now disabled by default.
Now for the system administrator who is having heart problems just thinking of how they will come to terms with the new settings, security and configuration of Windows 2003, Microsoft has brought out a Wizard to help people configure their servers how they want them and at the same time maintain the high level of security. The wizard was designed primarily to automate the configuration of server for high security based on server roles. Some of the roles that are in the Configuration wizard include Web servers, file servers and directory servers.
Untitled Page
The wizard, which came out a few months after the initial release of Windows 2003, is a fantastic add-on for anyone using this operating system. The wizard enables the user to easily set up their system and to carry out or perform specific roles in such a way that nothing else is touched or disturbed except for the feature required to carry out the task.
The wizard gets its data from an XML file. In doing so this enables you to make your own updates to the content, making sure the wizard accurately reflects the changes and implementations you have made. The wizard effectively stores all the items that are necessary to implement a particular service. And is extremely useful in that you know you will get a consistent configuration every time you use the wizard. On each page you will also see just what services are needed to perform specific roles. For example, if an administrator wanted to apply a Web server role to their system, all they would need to do is go through the pages to see what pre-selected items are on each page and what services were needed to perform the role.
The main thing most administrators will notice about the wizard is that there is plenty of opportunity to customize it to your needs. If you feel some options are not appropriate you have the option to not install any service, on the other hand you can also add services of your own if you feel the need. With the wizard, you are also able to decide whether or not unspecified services are left running or if they should be closed as soon as the server role is applied. Further pages reveal more information that deal with everything from which ports will be affected to filtering and encryption.
The Security Configuration Wizard will save a great deal of time not only for the inexperienced users but also for experienced administrators. It is one of the most useful aids and will only get better as later versions are released, and for the administrator who's never used Windows servers it will be a fantastic guide to learning just a little bit more about their new found environment.
Windows Server 2003 takes the best of Windows 2000 Server and makes it even better with its enhanced security, locked down systems and numerous other features. Windows Server 2003 is far more superior and cost-effective than previous versions, and I think it would be a fantastic addition or upgrade for any company or even an individual who needs the security it provides, and at the same time the reliability and functionality it gives its customers.