Windows Server 2003 Security: A Technical Reference

Establish Security Configuration

In addition to physical security, DCs must also be secured by configuring DC security settings and by establishing administrative boundaries. Proper configuration supports administrative boundaries, which can ensure better security configuration.

Best practices require the establishment of a DC security configuration baseline that can be applied to all domain controllers. Modifications to this baseline can be constructed where necessary. Security baselining is a good practice to establish for all server roles; Chapter 11 gives more information on using security baselines to establish security for systems throughout the forest.

Administrative boundaries are created by ensuring that administrators are limited to ...