Windows Server® 2012 Unleashed

Best Practices

The following are best practices from this chapter:

• Physically secure servers behind locked doors, in a controlled-access environment.

• Apply security in layers.

• Use the Server Roles and Features Wizard for turning on server roles and having them automatically secured.

• Use the integrated Windows Firewall for enhanced security, and only open ports or allow protocols when necessary.

• Use both inbound and outbound firewall rules to limit the exposure a compromised server would have.

• Reduce server attack surface by removing the server graphical shell and using Core Edition.

• Use the Run as Administrator command when administrative access is required instead of logging on as an administrator.

• Deploy AppLocker for as many ...