RE: Windows NT

[John Appel <JAppel () sphere com>]

The best single source is Steve Sutton's paper at
http://www.trustedsytems.com/NSAGuide.htm. It's very complete WRT setting
appropriate ACLS on both files and the registry, and points out a number of
other areas of concern.

Also, I highly recommend Gene Schultz's Basic and Advanced NT Security
courses (he teaches them for SANS & CSI).  I had the opportunity to take the
Advanced course last June and he went into considerable depth.

FWIW, Microsoft is supposed to be offering an NT security course via their
training network, but I haven't heard any details about what it will cover.

John

John Appel
Senior Systems Engineer
Sphere Solutions Inc.
jfa () sphere com



-----Original Message-----
From: owner-firewall-wizards () nfr net
[mailto:owner-firewall-wizards () nfr net]On Behalf Of Scot Anderson
Sent: Monday, March 01, 1999 8:48 PM
To: firewall-wizards () nfr net
Subject: Windows NT


Does anybody have a good reference for specific measures to "lock up" a
Windows NT installation?  I understand that this may be considered an
oxymoron, but I know there are some things that are a good idea to do
with it in order to close some of the more obvious holes.

--
Scot Anderson

Pager: 703-277-0412 | Fax: 781-685-5824
     --== PGP Key Available ==--