Guia de seguridad windows xp (ingles)

Microsoft Solutions for Security and Compliance






Windows XP Security Guide




















© 2006 Microsoft Corporation.  This work is licensed under the Creative Commons Attribution-Non Commercial License. To view a copy of this license, visit http://creativecommons.org/licenses/by-nc/2.5/ or send a letter to Creative Commons, 543 Howard Street, 5th Floor,San Francisco, California, 94105, USA.



Contents



Chapter 1: Introduction to the Windows XP Security Guide 1
Overview 1
Executive Summary 1
Who Should Read This Guide 2
Skills and Readiness 3
Scope of this Guide 3
Enterprise Client 3
Stand-Alone Client 3
Specialized Security – Limited Functionality 3
Chapter Overview 4
Chapter 1:Introduction to the Windows XP Security Guide 4
Chapter 2: Configuring the Active Directory Domain Infrastructure 4
Chapter 3: Security Settings for Windows XP Clients 4
Chapter 4: Administrative Templates for Windows XP 4
Chapter 5: Securing Stand-Alone Windows XP Clients 5
Chapter 6: Software Restriction Policy for Windows XP Clients 5
Chapter 7:Conclusion 5
Appendix A: Key Settings to Consider 5
Appendix B: Testing the Windows XP Security Guide 5
Download Content 5
Style Conventions 6
Summary 6
More Information 7


Chapter 2: Configuring the Active Directory Domain Infrastructure 9
Overview 9
OU Design to Support Security Management 9
Department OU 10
Secured XP Users OU 10Windows XP OU 11
GPO Design to Support Security Management 11
Security Templates 13
Security Template Management 14
Importing a Security Template 14
Administrative Templates 14
Administrative Template Management 15
Adding an Administrative Template to a Policy 15
Domain Level Group Policy 15
Password Policy Settings 15
Enforcepassword history 16
Maximum password age 16
Minimum password age 16
Minimum password length 17
Password must meet complexity requirements 17
Store password using reversible encryption for all users in the domain 17
Preventing Users from Changing Passwords Except When Required 18
Account Lockout Policy Settings 18
Account lockout duration 19Account lockout threshold 19
Reset account lockout counter after 20
User Rights Assignment Settings 20
Add workstations to domain 21
Security Option Settings 21
Microsoft network server: Disconnect clients when logon hours expire 22
Network Access: Allow anonymous SID/NAME translation 22
Network Security: Force logoff when logon hours expire 23Kerberos Policy 23
OU Level Group Policy 23
Group Policy Security Settings 23
Software Restriction Policy Settings 23
Group Policy Tools 24
Forcing a Group Policy Update 24
Viewing the Resultant Set of Policies 24
Group Policy Management Console 24
Summary 25
More Information 26


Chapter 3: Security Settings for Windows XP Clients 27Overview 27
Account Policy Settings 28
Local Policy Settings 28
Audit Policy Settings 28
Audit account logon events 29
Audit account management 29
Audit directory service access 29
Audit logon events 29
Audit object access 30
Audit policy change 31
Audit privilege use 31
Audit process tracking 31
Audit system events 32User Rights Assignment Settings 32
User Rights A – E 33
Access this computer from network 34
Act as part of the operating system 34
Adjust memory quotas for a process 34
Allow log on locally 34
Allow log on through Terminal Services 34
Backup files and directories 35
Bypass traverse checking 35
Change the system time 35...