Professional Windows Server 1002003 Security A Technical Reference [Electronic resources] نسخه متنی

اینجــــا یک کتابخانه دیجیتالی است

با بیش از 100000 منبع الکترونیکی رایگان به زبان فارسی ، عربی و انگلیسی

جستجو بر اساس ... همه عنوان پدیدآور موضوع یادداشت تمام متن
اصطلاحنامه مجموعه ها مرورالفبایی لغت نامه دهخدا
➟
جستجو در لغت نامه
بیشتر
کتابخانه شخصی پرسش از کتابدار ارسال منبع

Professional Windows Server 1002003 Security A Technical Reference [Electronic resources] - نسخه متنی

Roberta Bragg

| نمايش فراداده ، افزودن یک نقد و بررسی
افزودن به کتابخانه شخصی
میخواهم بخوانم
درحال خواندن
خوانده شده
ارسال به دوستان

آدرس پست الکترونیک گیرنده :

آدرس پست الکترونیک فرستنده :

نام و نام خانوارگی فرستنده :

پیغام برای گیرنده ( حداکثر 250 حرف ) :

کد امنیتی را وارد نمایید

ارسال
جستجو در متن کتاب
بیشتر
تنظیمات قلم

فونت

اندازه قلم

+ - پیش فرض

حالت نمایش

روز نیمروز شب
➟
جستجو در لغت نامه
بیشتر
لیست موضوعات

Windows Server 2003 Security: A Technical Reference

By Table of Contents | Index

If you''''re a working Windows administrator, security is your #1 challenge. Now there''''s a single-source reference you can rely on for authoritative, independent help with every Windows Server security feature, tool, and option: Windows Server 2003 SecurityRenowned Windows security expert Roberta Bragg has brought together information that was formerly scattered through dozens of books and hundreds of online sources. She goes beyond facts and procedures, sharing powerful insights drawn from decades in IT administration and security. You''''ll find expert implementation tips and realistic best practices for every Windows environment, from workgroup servers to global domain architectures. Learn how to: Reflect the core principles of information security throughout your plans and processes Establish effective authentication and passwords Restrict access to servers, application software, and data Make the most of the Encrypting File System (EFS) Use Active Directory''''s security features and secure Active Directory itself Develop, implement, and troubleshoot group policies Deploy a secure Public Key Infrastructure (PKI) Secure remote access using VPNs via IPSec, SSL, SMB signing, LDAP signing, and more Audit and monitor your systems, detect intrusions, and respond appropriately Maintain security and protect business continuity on an ongoing basis"Once again, Roberta Bragg proves why she is a leading authority in the security field! It''''s clear that Roberta has had a great deal of experience in real-world security design and implementation. I''''m grateful that this book provides clarity on what is often a baffling subject!"James I. Conrad, MCSE 2003, Server+, Certified Ethical Hacker James@accusource.net"Full of relevant and insightful information. Certain to be a staple reference book for anyone dealing with Windows Server 2003 security. Roberta Bragg''''s Windows Server 2003 Security is a MUST read for anyone administering Windows Server 2003."Philip Cox, Consultant, SystemExperts Corporation phil.cox@systemexperts.com"Few people in the security world understand and appreciate every aspect of network security like Roberta Bragg. She is as formidable a security mind as I have ever met, and this is augmented by her ability to communicate the concepts clearly, concisely, and with a rapier wit. I have enjoyed working with Roberta more than I have on any of the other 20 some odd books to which I have contributed. She is a giant in the field of network security."Bob Reinsch bob.reinsch@fosstraining.com"Windows Server 2003 Security explains why you should do things and then tells you how to do it! It is a comprehensive guide to Windows security that provides the information you need to secure your systems. Read it and apply the information."Richard Siddaway, MCSE rsiddaw@hotmail.com"Ms. Bragg''''s latest book is both easy to read and technically accurate. It will be a valuable resource for network administrators and anyone else dealing with Windows Server 2003 security."Michael VonTungeln, MCSE, CTT mvontung@yahoo.com"I subscribe to a number of newsletters that Roberta Bragg writes and I have ''''always'''' found her writing to be perfectly focused on issues I ''''need'''' to know in my workplace when dealing with my users. Her concise writing style and simple solutions bring me back to her columns time after time. When I heard she had written a guide on Windows 2003 security, I ''''had'''' to have it.Following her guidance on deployment, her advice on avoiding common pitfalls, and her easy to follow guidelines on how to lock down my network and user environments (those darned users!) has me (and my clients) much more comfortable with our Win2k3 Server deployments. From AD to GPO''''s to EFS, this book covers it all."Robert Laposta, MCP, MCSA, MCSE, Io Network Services, Sierra Vista AZrob.laposta@cox.net"Roberta Bragg has developed a ''''must have'''' manual for administrators who manage Microsoft Windows 2003 servers in their organizations. The best practices for strengthening security controls are well organized with practical examples shared throughout the book. If you work with Windows 2003, you need this great resource."Harry L. Waldron, CPCU, CCP, AAI, Microsoft MVP - Windows Security Information Technology Consultant harrywaldronmvp@yahoo.com"Roberta Bragg''''s Windows Server 2003 Security offers more than just lucid coverage of how things work, but also offers sound advice on how to make them work better."Chris Quirk; MVP Windows shell/user cquirke@mvps.org"This book is an invaluable resource for anyone concerned about the security of Windows Server 2003. Despite the amount and complexity of the material presented, Roberta delivers very readable and clear coverage on most of the security-related aspects of Microsoft''''s flagship operative system. Highly recommended reading!"Valery Pryamikov, Security MVP, Harper Security Consulting valery.pryamikov@harper.no"As long as you have something to do with Windows 2003, I have four words for you: ''''Order your copy now.''''"Bernard Cheah, Microsoft IIS MVP, Infra Architect, Intel Corp. bernard@mvps.org"Roberta Bragg has developed a ''''must have'''' manual for administrators who manage Microsoft Windows 2003 servers in their organizations. The best practices for strengthening security controls are well organized, with practical examples shared throughout the book. If you work with Windows 2003, you need this great resource."Harry L. Waldron CPCU, CCP, AAI Microsoft MVPWindows Security Information Technology Consultant
توضیحات
افزودن یادداشت جدید







Tools


Tools available for working with EFS-encrypted files include cipher and esfinfo.

Cipher


The following statement is the syntax of the command. Table 6-2 explains the switches.

cipher [{/e | /d}] [/s:foldername] [/a] [/i] [/f] [/q] [/h] [/k] [/u[/n]] [{pathname[...]]
 | /r:pathnamenoextension | /w:pathname | /x[:pathname] pathnamenoextension}]

Table 6-2. EFS Differences

Switch

Description

/e

Encrypts folders. Cipher cannot encrypt files that are marked as read-only, or those that are marked as system files.

/d

Decrypts folders.

/s:foldername

Operates on this folder and all its subfolders. Multiple folders can be specified using wildcard characters.

/a

Operates on files and directories.

/i

Continues even if errors occur; for example, if cipher has a problem decrypting a specific file in the specified folder, it will continue decrypting the rest of the files. By default, an error halts its operation, and this switch overrides that behavior.

/f

Forces encryption or decryption of all objects. By default, cipher would skip those files that have already been encrypted or decrypted.

/q

Provides minimal reporting.

/h

Displays files with hidden or system attributes. (These files are not encrypted or decrypted by default.)

/k

Obtains a new file encryption key for the user running cipher. (All other operations are ignored.)

/u

If the user's file encryption keys or the keys of the recovery agent have been changed, updates all encrypted files (can only be used with the /n switch).

/n

Used with the /u switch, will not update keys. Instead, it will find all of the encrypted files on local drives. (It can only be used with the /n switch.)

/r:pathname noextension

A new recovery agent certificate and private key are generated and then written to the files specified in pathnamenoextension (cipher ignores all other options).

/w:pathname

Removes data remnants on unused portions of a volume. (All other options are ignored.) Use this switch if files have been encrypted after being written to the disk.

/x:pathname pathnameno extension

Will find and identify certificates and private keys used by EFS for the logged on user and back them up to a file. When pathname is given, only the certificate used to encrypt the files at that location is backed up. If pathname is not given, the user's current EFS certificate and keys is backed up. Keys are written to a filename specified by pathnamenoextension and are given the extension .pfx. (All other options are ignored.)

/?

Displays help.

Example uses of the cipher command are as follows:

To back up certificates and keys to a file called efskeys:


cipher/x c:\efskeys

To encrypt the reports folder and all subfolders:


cipher /e /s:reports

To encrypt a single file, in this case the JanuarySales.doc in the Midwest\Sales folder:


cipher/e /a Midwest\Sales\JanuarySales.doc

To determine which files in the JanuarySales folder are encrypted:


cipher monthlyreports\may\*

To remove data remnants in the D volume:


cipher /w


Cipher /w does not lock the drive. Other programs can still operate and thus may prevent cipher from erasing portions of the drive. For this reason, stop these programs and do not use the drive until cipher has completed this task. Cipher /w can take a long time to complete. Do not use cipher /w unless it is necessary.

Esfinfo


Efsinfo.exe is a command-line tool available in the Windows Server 2003 Support Tools and the Windows XP Professional and Windows 2000 Resource Kits. It can be used to display the encrypted files in a folder and list the certificates used to encrypt a file. You can also download esfinfo from http://www.microsoft.com/windows2000/techinfo/reskit/tools/default.asp.


/ 194