Windows - GoFuckYourself.com

mav · 04-16-2003, 05:33 PM

anyone use Win NT/2000 ? I have a guy developing a site using this. Any security issues, reccomendations?

Thanks

Mr Pheer · 04-16-2003, 05:34 PM

make sure you download the newest service pack and install all the security (critical) updates

pr0 · 04-16-2003, 05:37 PM

GFY uses IIS

chupacabra · 04-16-2003, 05:38 PM

Quote:

GFY uses IIS

lEricPl · 04-16-2003, 05:50 PM

Make sure you have an admin who stays on top of the server.

Use the IIS Lockdown Tool

Use URLSCAN

Use the Baseline Security Analyzer

Use IPSEC

Disable Anon access for the SMTP Server...or if you are not going to use it, disable it.

Disable all Windows Services that you won't use...Telnet, Remote Registry etc.

A Windows Server is an Enterprise Server...and it takes a lot to get it setup right. Do some reading at http://www.microsoft.com

95% of all web work I do is for Windows Servers and I have never had a security problem.

Don't take Setup lightly. It takes a while to get a new server tweeked out.

marty · 04-16-2003, 05:51 PM

Quote:

Originally posted by MrPheer
make sure you download the newest service pack and install all the security (critical) updates

diddo

mav · 04-16-2003, 05:51 PM

The Server Configuration required would be
Win NT/2000 OS

mav · 04-16-2003, 05:52 PM

thanks

lEricPl · 04-16-2003, 05:56 PM

Quote:

Originally posted by mav
The Server Configuration required would be
Win NT/2000 OS

Stay away from Windows NT. It's Crap and not supported by MS anymore.

Stick with Windows 2000 Server or Windows Server 2003 (About to be released in a few days)

Theo · 04-16-2003, 05:58 PM

step no1 disable guest account
step no2 get linux

Juan · 04-16-2003, 05:58 PM

Just use HFNETCHK and you'll be fine. That's the server hotfix checker. And of course, what everybody else said, and what you'd do for any server... turn off everything that you're not using.

Juan · 04-16-2003, 05:59 PM

Quote:

Originally posted by lEricPl

...or Windows Server 2003 (About to be released in a few days)

Oh yeah. Definitely use a band spanking new OS version as a server. The newer the better. That's a great idea.

Dumbass.

lEricPl · 04-16-2003, 06:00 PM

Quote:

Originally posted by Soul_Rebel
step no1 disable guest account

Guest account is disabled by default on Windows Servers....but don't enable it!

lEricPl · 04-16-2003, 06:02 PM

Quote:

Originally posted by Juan

Oh yeah. Definitely use a band spanking new OS version as a server. The newer the better. That's a great idea.

Dumbass.

Hey Fuck you FuckNut.

I have been using Windows 2003 Beta 2 for the last 6 months...so have a lot of other MS sites....

It's stable as a fucking rock...

Now, open your mouth and gargle you fuckwit.

Juan · 04-16-2003, 06:04 PM

Quote:

Originally posted by lEricPl

Hey Fuck you FuckNut.

I have been using Windows 2003 Beta 2 for the last 6 months...so have a lot of other MS sites....

It's stable as a fucking rock...

Now, open your mouth and gargle you fuckwit.

Well, 6 months. That's a great test period. I'm sure that all of the problems are all worked out by now. And I'm sure that the final release will be identical to this perfect beta. Suuure.

What sites do you run...? I could use some more bandwidth.

MattO · 04-16-2003, 06:10 PM

.NET server 2003 is awesome. I've been running betas of it since 2001 and it's sturdy as fuck.

04-16-2003, 05:33 PM	#1
mav Registered User Join Date: May 2002 Posts: 56	Windows anyone use Win NT/2000 ? I have a guy developing a site using this. Any security issues, reccomendations? Thanks __________________ Maverick,

04-16-2003, 05:34 PM	#2
Mr Pheer Retired Industry Role: Join Date: Dec 2002 Posts: 21,262	make sure you download the newest service pack and install all the security (critical) updates __________________ 2 lifeguards for Jessica

04-16-2003, 05:37 PM	#3
pr0 rockin tha trailerpark Industry Role: Join Date: May 2001 Location: ~Coastal~ Posts: 23,088	GFY uses IIS __________________ __________ Loadedca$h - get sum! - Revengebucks - mmm rebills! - webair (gotz sErVrz)

04-16-2003, 05:51 PM	#7
mav Registered User Join Date: May 2002 Posts: 56	The Server Configuration required would be Win NT/2000 OS __________________ Maverick,

04-16-2003, 05:52 PM	#8
mav Registered User Join Date: May 2002 Posts: 56	thanks __________________ Maverick,

04-16-2003, 05:50 PM	#5
lEricPl Confirmed User Join Date: Dec 2002 Location: FL Posts: 1,062	Make sure you have an admin who stays on top of the server. Use the IIS Lockdown Tool Use URLSCAN Use the Baseline Security Analyzer Use IPSEC Disable Anon access for the SMTP Server...or if you are not going to use it, disable it. Disable all Windows Services that you won't use...Telnet, Remote Registry etc. A Windows Server is an Enterprise Server...and it takes a lot to get it setup right. Do some reading at http://www.microsoft.com 95% of all web work I do is for Windows Servers and I have never had a security problem. Don't take Setup lightly. It takes a while to get a new server tweeked out.

04-16-2003, 05:58 PM	#10
Theo HAL 9000 Industry Role: Join Date: May 2001 Posts: 34,515	step no1 disable guest account step no2 get linux

04-16-2003, 05:58 PM	#11
Juan Registered User Join Date: Apr 2003 Posts: 26	Just use HFNETCHK and you'll be fine. That's the server hotfix checker. And of course, what everybody else said, and what you'd do for any server... turn off everything that you're not using.

04-16-2003, 06:10 PM	#16
MattO The O is for Oohhh Join Date: Feb 2003 Location: AUSTIN TEJAS Posts: 10,861	.NET server 2003 is awesome. I've been running betas of it since 2001 and it's sturdy as fuck.