Ing Sistemas

Microsoft Solutions for
Security

Windows Server 2003
Security Guide

Microsoft ®

Solutions for Security

Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise noted, the
example companies, organizations, products, domain names, e – mail addresses, logos, people, places and events depicted herein arefictitious, and
no association with any real company, organization, product, domain name, e – mail address, logo, person, place or event is intended or should be
inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this
document may be reproduced, stored in or introduced into a retrieval system, ortransmitted in any form or by any means (electronic, mechanical,
photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation.

Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document.
Except as expressly provided in any written licenseagreement from Microsoft, the furnishing of this document does not give you any license to these
patents, trademarks, copyrights, or other intellectual property.

© 2003 Microsoft Corporation. All rights reserved.

Microsoft and Visual Basic are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.

The names of actual companies andproducts mentioned herein may be the trademarks of their respective owners.

Acknowledgements
The Microsoft Solutions for Security group (MSS) would like to acknowledge and thank
the team that produced the Windows Server 2003 Security Guide. The following people
were either directly responsible, or made a substantial contribution to the writing,
development, and testing of this solution.Authors

Reviewers

Kurt Dillard

Rich Benack

José Maldonado

Rob Cooper

Brad Warrender

Duane Crider

Content Contributors
William Dixon
Eric Fitzgerald
Stirling Goetz
Ian Hellen
Jesper Johansson
Kirk Soluk

Testers
Gaurav Singh Bora
Kenon Bliss
Paresh Gujar
Vince Humphreys
Ashish Java

Editors
Reid Bannecker
Wendy Cleary
John Cobb
Kelly McMahon
Jon TobeyProgram Manager
Chase Carpenter

Mike Greer
Robert Hensing
Chad Hilton
Andrew Mason
Joe Porter
Joel Scambray
Ben Smith
Jeff Williams

Contributors
Ignacio Avellaneda
Ganesh Balakrishnan
Shelly Bird
Derick Campbell
Sean Finnegan
Joanne Kennedy
Jeff Newfeld
Rob Oikawa
Vishnu Patankar
Keith Proctor
Bill Reid
Sandeep Sinha
Bomani Siwatu
Graham Whiteley

At the request ofMicrosoft, The Center for Internet Security (CIS) and the United States
Department of Commerce National Institute of Standards and Technology (NIST)
participated in the final review of these Microsoft documents and provided comments,
which were incorporated into the published versions.
Microsoft would also like to thank the Siemens Workplace Architecture Team as well as
National Broadband LLC fortheir invaluable input and participation in the Early Adopter
Program for this guide.

Table of Contents
Introduction to the Windows Server 2003 Security Guide............................................................... 1
Overview ...................................................................................................................................... 1
Executive Summary..................................................................................................................... 2
Who Should Read This Guide ..................................................................................................... 3
Get Secure Stay Secure .............................................................................................................. 4
Scope of...