CONFIGURING AND MANAGING COMPUTER SECURITY

1
CONFIGURING AND MANAGING COMPUTER SECURITY

• Chapter 14

2
OVERVIEW

• Configure and manage Local Security Policy
• Manage security configuration with templates
• Establish, implement, and monitor a security
  audit policy

3
SECURITY POLICY

• Local Security Policy
• Domain Security Policy

4
LOCAL SECURITY POLICY
5
LOCAL SECURITY POLICY (CONTINUED)

• Account policies
• Password settings
• Lockout settings
• Audit policy
• User rights assignment
• Security settings

6
DOMAIN SECURITY POLICY
7
MANAGING SECURITY POLICY

• Security templates
• Security Configuration and Analysis snap-in
• Secedit.exe

8
SECURITY TEMPLATES

• Setup security.inf
• Compatws.inf
• Securews.inf
• Hisecws.inf
• Rootsec.inf

9
CREATING A CUSTOM SECURITY POLICY MANAGEMENT
CONSOLE
10
CONFIGURING SECURITY TEMPLATES
11
SECURITY CONFIGURATION AND ANALYSIS SNAP-IN
12
CREATING AN ANALYSIS DATABASE
13
ANALYZING SECURITY
14
CONFIGURING SECURITY
15
EXPORTING A TEMPLATE
16
SECEDIT.EXE

• Analyze
• Configure
• Export
• Validate

17
SECURITY AUDIT POLICY

• Planning an audit policy
• Implementing and managing an audit policy
• Monitoring audit event logs

18
WHAT CAN YOU AUDIT?
19
PLANNING AN AUDIT POLICY

• Determine audit requirements
• Select objects for auditing
• Assign responsibility for monitoring

20
CONFIGURING THE EVENT LOG
21
ENABLING AUDIT POLICY
22
AUDITING NTFS OBJECT ACCESS
23
MONITORING SECURITY EVENTS
24
SUMMARY

• Local Security Policy configures security on one
  system.
• Domain Security Policy overrides Local Security
  Policy.
• Security templates simplify configuration.
• Use the Security Configuration and Analysis
  snap-in to manage security.

25
SUMMARY (CONTINUED)

• Secedit.exe manages security from a command
  prompt.
• Security audits monitor security effectiveness.
• Plan auditing in advance.
• Monitor auditing with Event Viewer.