Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Can anyone point me at some good resources on Windows hardening servers and desktop? From 2000 upwards. Thanks.

share|improve this question

closed as too broad by RobM, Jacob, MikeyB, squillman, Rex Jun 19 at 21:28

There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.

add comment

5 Answers 5

My go-to site for this sort of thing is the NSA.

Check out http://www.nsa.gov/ia/guidance/security_configuration_guides/operating_systems.shtml for a number of OSes that they support for hardening.

share|improve this answer
add comment

http://nvd.nist.gov/fdcc/index.cfm

also search on disa stig!

share|improve this answer
    
I wish I had the balls to implement the FDCC where I work, but whiny users would roam the halls looking for my head. –  ajstein Feb 4 '11 at 3:00
add comment

This site helped me a lot on the "acient" side :)

http://www.gotroot.com/Windows+Hardening+Guide

share|improve this answer
add comment

The CERT(R) Guide to System and Network Security Practices by Julia Allen merits a look.

share|improve this answer
add comment
  • CIS Security Benchmarks, a 300 page document, contains well-described guidelines sanctioned by Microsoft, NIST and NSA, provided for Windows Server 2000, 2003, 2008, 2012.

The configuration recommendations contained in this document reflect consensus between Microsoft Corporation, The National Institute of Standards and Technology (NIST), and the Center for Internet Security (CIS).

At the request of Microsoft and the Center for Internet Security, the National Security Agency Information Assurance Directorate participated in the review of these recommendations and provided comments that were incorporated into the final published version.

  • As mentioned before, there are the STIGs, configuration standards for the DoD. For Windows Server 2012 there are more than 400 guidelines in xml format requiring the STIG-viewer (jar file).
share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.