Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.

Sign up to join this community

Anybody can ask a question

Anybody can answer

The best answers are voted up and rise to the top

How do I apply a security baseline to Windows 2008 R2?

Ask Question

Asked 12 years, 9 months ago

Modified 12 years, 4 months ago

Viewed 4k times

6

I've setup a Windows 2008 R2 server with an Active Directory Domain Services role. I would like to apply the Specialized Security – Limited Functionality (SSLF) security baseline to it, but am unsure how to go about this.

I have downloaded and installed Security Compliance Manager tool. I think I need to use some file from this, but am unsure which one and how to apply it to the 2008 Server. I am really new to all this so step by step guides would be greatly appreciated.

edited Jul 20, 2011 at 20:59

nealmcb

20.7k6 gold badges72 silver badges117 bronze badges

asked Feb 11, 2011 at 8:20

user1385

Move this to Server Fault.
– Steve
Feb 11, 2011 at 16:23
You'll want the GPOAccelerator and a method to test. Everything you need to know about securing server 2008 (as a baseline) can be found here: docstoc.com/docs/5089940/Windows-Server-2008-Security-Guide
– iivel
Feb 12, 2011 at 20:54
@SteveSyfuhs, I'm on the fence... it is a sysadmin q, but it is about hardening the system...
– AviD ♦
Feb 13, 2011 at 7:28
I'm with @SteveSyfuhs on this one. If the question was about specific configuration options, or looking to identify baselines, it would be more relevant here. However, @bert48 seems to already have a baseline in mind and just needs to get it on to the system. That's much more a "Server Admin" function than it is an "IT Security" issue.
– Iszi
Feb 13, 2011 at 9:13

Add a comment |

1 Answer 1

Sorted by:

2

Has been replaced by the SCM toolkit: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=fb8b981f-227c-4af6-a44b-b115696a80ac&displaylang=en

Over view of SCM toolkit: http://social.technet.microsoft.com/wiki/contents/articles/microsoft-security-compliance-manager-scm.aspx

SCM getting started guide: http://social.technet.microsoft.com/wiki/contents/articles/microsoft-security-compliance-manager-scm-getting-started.aspx

SCM frequently asked questions: http://social.technet.microsoft.com/wiki/contents/articles/microsoft-security-compliance-manager-scm-frequently-asked-questions-faq.aspx

Windows 2008 security resource book: http://www.amazon.com/Windows-Server-2008-Security-Resource/dp/0735625042/ref=sr_1_1?ie=UTF8&qid=1294339984&sr=8-1

edited Feb 21, 2011 at 12:17

user185

answered Feb 15, 2011 at 7:20

Mike Soule

1737 bronze badges

Getting Started Guide: social.technet.microsoft.com/wiki/contents/articles/… FAQ for SCM Toolkit: social.technet.microsoft.com/wiki/contents/articles/…
– Mike Soule
Feb 15, 2011 at 7:21
Baseline download links for SCM Toolkit: social.technet.microsoft.com/wiki/contents/articles/… PDF Guide for Solutions Accelerator SCM Toolkit: iase.disa.mil/stigs/downloads/pdf/… Decent book on 2008 security: amazon.com/Windows-Server-2008-Security-Resource/dp/0735625042/… More info on release dates: iase.disa.mil/stigs/faq.html#4
– Mike Soule
Feb 15, 2011 at 7:21

Add a comment |

You must log in to answer this question.