Securing an ad enviorement

[Guest]

I am just sounding some info to see what responses I will receive. My
company is creating a separate secure network for a project. With an
emphasis on secure it’s my task to create the ad infrastructure. I know the
basics to lock down an ad environment (have been doing this for a few years)
What I wanted to know is there anyone out there that has something similar
and can share some experiences, especially working with group policy. The
server will be 2003 and the workstations will be xp. Is there anything you
guys think I should consider or just pay special attention to?

 

[Eduard Koller [MSFT]]

This should be a good start:
http://www.microsoft.com/technet/pr...ctory/activedirectory/stepbystep/default.mspx

--
Eduard Koller[MS]

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

 

[Steven L Umbach]

Since you are using XP Pro workstations be sure to take advantage of
Software Restriction Policies and use the Group Policy Management Console.
You will find it and Resultant Set of Policy in planning or logging mode
very helpful in managing and troubleshooting Group Policy. The Windows 2003
Deployment Kit has an excellent chapter on running a managed environment
that heavily involves Group Policy as shown in the link below. --- Steve

http://www.microsoft.com/technet/pr...Kit/3ddb5bec-a454-4e9b-a6e7-397ee7c4ea3a.mspx