aight, I got some server class hardware for free the other day and figured I'd get to fuckin with it. it's behind a firewall/router at my place, but I still want to make sure it's relatively secure. Any suggestions on how to go about securing this, or any suggestions on websites to go to or books to get to learn about the proper set up? I'm mainly doing this for learning at this point.

I only have a legit copy of Win2003, so that's why I'm using it as opposed to anything newer.

1/31/2010 5:25:25 PM

If its on nat, and a semi decent fw, and running win fw thats about all you need. Update it and enjoy.

Play around. Thats how I learned stuff. AD, DNS, WINS, and remote access are all good things to start with on it.

1/31/2010 5:34:28 PM

i mean, it's nothing more than an ISP's router with a firewall, so, I dunno if that's enough. I just don't want to get all my machines at my place screwed up because I didn't know what I was doing on one of them

1/31/2010 6:37:35 PM

I don't think this is free any longer, but lookup "CIS Scoring Tool" for Win2003. It's a java program that pulls a bunch of info from the operating system and ranks the system security. Win2003 out of the box scores a 49% or so. You realistically can't go above 90% unless you want to break most application functionality. If you can't get the program, the PDF may still be around describing the various components that need to be locked down / secured.

2/1/2010 6:58:25 AM

^^ if its that, it probably has NAT on it. Check your ip address, if its a 192.168.x.x then you are running nat. It and the 2 firewalls i mentioned before will be enough.

This said, dont go opening ports in your router firewall for port forwarding, as it will remove any security you have for this issue.

2/1/2010 2:04:29 PM

alright. Here's the good stuff. Trying to add workstations to the domain. Stuff just aint workin right. I disable the firewall on the server, things work perfectly. What ports do I need to enable for this thing?

I've found this, but I'm not sure if it is applicable
http://technet.microsoft.com/en-us/library/bb727063.aspx

Is this everything?
http://support.microsoft.com/kb/179442

3/8/2010 11:05:23 PM

anyone?

3/9/2010 10:29:36 PM