Windows

[mav]

anyone use Win NT/2000 ? I have a guy developing a site using this. Any security issues, reccomendations?

Thanks

[Mr Pheer]

make sure you download the newest service pack and install all the security (critical) updates

[pr0]

GFY uses IIS

[chupacabra]

GFY uses IIS

[lEricPl]

Make sure you have an admin who stays on top of the server.

Use the IIS Lockdown Tool

Use URLSCAN

Use the Baseline Security Analyzer

Use IPSEC

Disable Anon access for the SMTP Server...or if you are not going to use it, disable it.

Disable all Windows Services that you won't use...Telnet, Remote Registry etc.

A Windows Server is an Enterprise Server...and it takes a lot to get it setup right. Do some reading at http://www.microsoft.com

95% of all web work I do is for Windows Servers and I have never had a security problem.

Don't take Setup lightly. It takes a while to get a new server tweeked out.

[marty]

Originally posted by MrPheer
make sure you download the newest service pack and install all the security (critical) updates

diddo

[mav]

The Server Configuration required would be
Win NT/2000 OS

[mav]

thanks

[lEricPl]

Originally posted by mav
The Server Configuration required would be
Win NT/2000 OS

Stay away from Windows NT. It's Crap and not supported by MS anymore.

Stick with Windows 2000 Server or Windows Server 2003 (About to be released in a few days)

[Theo]

step no1 disable guest account
step no2 get linux

[Juan]

Just use HFNETCHK and you'll be fine. That's the server hotfix checker. And of course, what everybody else said, and what you'd do for any server... turn off everything that you're not using.

[Juan]

Originally posted by lEricPl


...or Windows Server 2003 (About to be released in a few days)

Oh yeah. Definitely use a band spanking new OS version as a server. The newer the better. That's a great idea.

Dumbass.

[lEricPl]

Originally posted by Soul_Rebel
step no1 disable guest account

Guest account is disabled by default on Windows Servers....but don't enable it!

[lEricPl]

Originally posted by Juan


Oh yeah. Definitely use a band spanking new OS version as a server. The newer the better. That's a great idea.

Dumbass.

Hey Fuck you FuckNut.

I have been using Windows 2003 Beta 2 for the last 6 months...so have a lot of other MS sites....

It's stable as a fucking rock...

Now, open your mouth and gargle you fuckwit.

[Juan]

Originally posted by lEricPl



Hey Fuck you FuckNut.

I have been using Windows 2003 Beta 2 for the last 6 months...so have a lot of other MS sites....

It's stable as a fucking rock...

Now, open your mouth and gargle you fuckwit.

Well, 6 months. That's a great test period. I'm sure that all of the problems are all worked out by now. And I'm sure that the final release will be identical to this perfect beta. Suuure.

What sites do you run...? I could use some more bandwidth.

[MattO]

.NET server 2003 is awesome. I've been running betas of it since 2001 and it's sturdy as fuck.