Security through AD

[Guest]

Hi all

We are a small biz and we need tighten up security within. We run Win2k Server w/AD and I was wondering what else we can do to tighten up security around the office. So far we have this
1. Creating a task to lock workstation after 20 minute
2. Changed password policy (Thresehold, lockout, etc
3. Install updates and patche
4. Change Admin password for workstations

Is there anything else we can implement that wont restrict user too much, yet provide a secure network

Thanks
Jvegas

 

[Cary Shultz [A.D. MVP]]

JVegas,

You might want to also rename both the Administrator and Guest accounts.

Since this is a WIN2000 environment I would look at a GPO to lock the
workstations after 20 minutes ( or whatever time frame is appropriate -
HIPPA requires 1 minute, I think! ).

You might also want to have some sort of Anti Virus Application running (
common ones are Symantec and TrendMicro ). I am sure that you have this but
are not including it in 'Secuirty'. I would.

There are many other possible things that you can do. Example, permissions.
Make sure that everything is tight. This can mean many different things. I
might start with Everybody @ Full Control. This is not very secure at all.
Make good use of Security Groups and make sure to apply permissions
correctly ( create a global / universal security group, place the user
account objects / other security groups in that group, create a local
security group, apply the permissions to the resource to the local security
group and make the global / universal security group a member of that
particular local security group ).

HTH,

Cary

Hi all,

We are a small biz and we need tighten up security within. We run Win2k

Server w/AD and I was wondering what else we can do to tighten up security
around the office. So far we have this: