Can anyone point me at some good resources on Windows hardening servers and desktop? From 2000 upwards. Thanks.
My go-to site for this sort of thing is the NSA.
Check out http://www.nsa.gov/ia/guidance/security_configuration_guides/operating_systems.shtml for a number of OSes that they support for hardening.
also search on disa stig!
This site helped me a lot on the "acient" side :)
- CIS Security Benchmarks, a 300 page document, contains well-described guidelines sanctioned by Microsoft, NIST and NSA, provided for Windows Server 2000, 2003, 2008, 2012.
The configuration recommendations contained in this document reflect consensus between Microsoft Corporation, The National Institute of Standards and Technology (NIST), and the Center for Internet Security (CIS).
At the request of Microsoft and the Center for Internet Security, the National Security Agency Information Assurance Directorate participated in the review of these recommendations and provided comments that were incorporated into the final published version.