Skip to Content
Securing Windows NT/2000 Servers for the Internet
book

Securing Windows NT/2000 Servers for the Internet

by Stefan Norberg
November 2000
Intermediate to advanced
216 pages
6h 3m
English
O'Reilly Media, Inc.
Content preview from Securing Windows NT/2000 Servers for the Internet

Chapter 2. Building a Windows NT Bastion Host

This chapter explains how to build a secure Windows NT bastion host by modifying the default Windows NT configuration. The configuration changes and procedures I explain focus on Windows NT 4.0, but most of it is also applicable to Windows 2000. Chapter 3, focuses on differences in Windows 2000.

If you carefully apply the changes suggested in this chapter, you should be able to build a very secure Windows server. However, there are several caveats.

First, remember that a chain is only as strong as its weakest link. If you follow the configuration steps in this chapter, your operating system will be quite secure. However, every application installed will also have to be configured with extreme caution—especially applications that require high privileges to run properly.[24]

Second, note that if you secure your Windows NT server as described in this chapter, you’ll no longer be able to perform remote administration via NetBIOS-based tools such as Server Manager and Event Viewer. You won’t even be able to copy files to the system over the network anymore. However, there’s no need to panic! In Chapter 4, I teach you how to build a new and more secure remote management foundation for your bastion host.

Third, the methodology presented in these chapters primarily targets small to medium-sized perimeters with up to 50 or so Windows NT hosts. If you have plans to build a perimeter with more than 50 to 75 hosts, consider the dual-homed approach ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

Windows 10 Troubleshooting

Windows 10 Troubleshooting

Mike Halsey
Windows File System Troubleshooting

Windows File System Troubleshooting

MVP Mike Halsey, MVP Andrew Bettany
Windows Server 2016: Unleashed

Windows Server 2016: Unleashed

Rand Morimoto, Jeffrey Shapiro, Guy Yardeni, Omar Droubi, Michael Noel, Andrew Abbate, Chris Amaris

Publisher Resources

ISBN: 1565927680Catalog PageErrata