Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Can anyone point me at some good resources on Windows hardening servers and desktop? From 2000 upwards. Thanks.

share|improve this question

closed as too broad by RobM, Jacob, MikeyB, squillman, Rex Jun 19 '14 at 21:28

There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.

My go-to site for this sort of thing is the NSA.

Check out for a number of OSes that they support for hardening.

share|improve this answer

also search on disa stig!

share|improve this answer
I wish I had the balls to implement the FDCC where I work, but whiny users would roam the halls looking for my head. – ajstein Feb 4 '11 at 3:00

This site helped me a lot on the "acient" side :)

share|improve this answer

The CERT(R) Guide to System and Network Security Practices by Julia Allen merits a look.

share|improve this answer
  • CIS Security Benchmarks, a 300 page document, contains well-described guidelines sanctioned by Microsoft, NIST and NSA, provided for Windows Server 2000, 2003, 2008, 2012.

The configuration recommendations contained in this document reflect consensus between Microsoft Corporation, The National Institute of Standards and Technology (NIST), and the Center for Internet Security (CIS).

At the request of Microsoft and the Center for Internet Security, the National Security Agency Information Assurance Directorate participated in the review of these recommendations and provided comments that were incorporated into the final published version.

  • As mentioned before, there are the STIGs, configuration standards for the DoD. For Windows Server 2012 there are more than 400 guidelines in xml format requiring the STIG-viewer (jar file).
share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.