Always remember to build and patch your system before connecting it to the network or internet
- Only install required components. Do not install items like simple TCP/IP services, Internet Information Server, WINS, etc. unless they are needed.
- Configure windows auto updates.
- Use System Policy Templates .
- Disable unnecessary services in the services control panel and registry .
- Enable Windows XP or 2003 firewall .
- Enable IP Security Policies .
- Disable IIS ftp and smtp services if IIS is needed.
- Disable or wrap unencrypted services (e.g., MSSQL) .
No comments:
Post a Comment