Update and Config, which first?

[min]

Hi, there:
I gona install win2000 server. I am wondering, after the server installed
and running, what is the right procedure to do the following?

1, install hard ware drivers, such as network card, sound card, ...
2, update windows
3, install firewall
4, install anti-virus software
5, install applications
6, configure the server to run Active server
7, configure the server to run DHCP, IIS
8, install MS.Net

Thanks!

Min

 

[Lanwench [MVP - Exchange]]

Hi, there:
I gona install win2000 server. I am wondering, after the server
installed and running, what is the right procedure to do the
following?

1, install hard ware drivers, such as network card, sound card, ...
2, update windows
3, install firewall

Which firewall? I suggest you protect your network at the perimeter with a
separate firewall.

4, install anti-virus software
5, install applications
6, configure the server to run Active server
7, configure the server to run DHCP, IIS
8, install MS.Net

Do you need .NET for some reason?

Note - I'd do it like this:

1. Install W2k server - drivers should be installed automatically during
setup, but update them w/the mfr's latest and greatest drivers immediately
thereafter if you want
2. Install SP4
3. dcpromo the box to set up AD - this should prompt you to set up DNS
4. Install DHCP, IIS
5. Run WU to get all critical updates
6. Install software as needed

rinse, lather, repeat WU as necessary. Do not connect any computer/server to
the Internet without having a firewall in place *first*. As I said, the
first place to start there is with a separate firewall IMO - get a decent
hardware appliance that can also do NAT and put it between your LAN and
Internet router.

 

[min]

Thank you for quick reply!
I have sygate and zone alarm as firewall (both are free software, I don't
have hardware firewall). Do you know which is better?

I need VS.Net (sorry, its VS.Net not MS.Net) for programming. I need instal
SQL Server, too. Actually, I have to install VS 6.0 for old applications
created using VB 6 as well.

Min

"Lanwench [MVP - Exchange]"

 

[Lanwench [MVP - Exchange]]

Thank you for quick reply!
I have sygate and zone alarm as firewall (both are free software, I
don't have hardware firewall). Do you know which is better?

I'd get a cheap and cheerful hardware appliance like an $80 NetGear FR114p.

I need VS.Net (sorry, its VS.Net not MS.Net) for programming. I need
instal SQL Server, too. Actually, I have to install VS 6.0 for old
applications created using VB 6 as well.

Min

"Lanwench [MVP - Exchange]"

Which firewall? I suggest you protect your network at the perimeter
with a separate firewall.


Do you need .NET for some reason?

Note - I'd do it like this:

1. Install W2k server - drivers should be installed automatically
during setup, but update them w/the mfr's latest and greatest
drivers immediately thereafter if you want
2. Install SP4
3. dcpromo the box to set up AD - this should prompt you to set up
DNS
4. Install DHCP, IIS
5. Run WU to get all critical updates
6. Install software as needed

rinse, lather, repeat WU as necessary. Do not connect any
computer/server to the Internet without having a firewall in place
*first*. As I said, the first place to start there is with a
separate firewall IMO - get a decent hardware appliance that can
also do NAT and put it between your LAN and Internet router.

 

[Dave Patrick]

To add to this; download separately and install these two before connecting
to any network.

These may help.

http://support.microsoft.com/?kbid=826955
http://www.microsoft.com/security/incident/sasser.asp

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


:
| min wrote:
| > Thank you for quick reply!
| > I have sygate and zone alarm as firewall (both are free software, I
| > don't have hardware firewall). Do you know which is better?
|
| I'd get a cheap and cheerful hardware appliance like an $80 NetGear
FR114p.

 

[Wouter]

To add to this; download separately and install these two
before connecting to any network.

These may help.

I agree!!!
Again: today NEVER ever connect a fresh installed Windows PC to
ANY network, unless you are 200% sure your network is free of
Blaster, Sasser and similar worms (in large corporate networks
you are NEVER sure).
The current strategy is:
1 Install Windows from CD (DO not connect to any network yet!!)
2 Install any critical hardware drivers from CD (the most
critical is the network driver in this stage)
3 Install the latest Service Pack from CD
4 Install the most critical Security fixes from CD or USB stick
(not all hotfixes are critical for this purpose)
5 Now you can connect your PC to the network
6 Run Windows Update and install at least all security related
patches
7 Get all other hardware drivers or updates from the different
vendors websites
8 Get your applications and data from your file server for
installation

This is our current company bare minimum hotfix requirement
before connecting a Windows 2000 PC to the network.
828035 MS03-043
828749 MS03-049
832894 MS04-004 (Internet Explorer)
835732 MS04-011
828741 MS04-012