Security Management White Papers
Master file system security in Windows
Overview
In this free chapter from O'Reilly's Securing Windows Server 2003, you can learn how to avoid common mistakes and take advantage of best practices for securing the Windows file system using NTFS file permissions and the Encrypting File System (EFS).
In the opening of Chapter 4 of Securing Windows Server 2003, author Mike Danseglio explains, "The use of long-term computer data storage, whose benefits are numerous, raises special security consideration for the system administrator: how do you protect data so that only the intended user has access while ensuring some level of recoverability over time? In this chapter, you'll learn how to use file permissions and EFS—the two main file protection mechanisms provided by Windows Server 2003—to control user access to files. You'll see how to use these mechanisms appropriately and how they are often misconfigured in ways that prevent desired access. You'll also learn how to plan for a number of special security concerns specific to the use of portable computers. These plans may include Syskey, a special tool for protecting the account database, which I show you how to use properly."
Also in this chapter, which you can download here for free, Danseglio provides in-depth information, including full explanations of how the features work, best practices, common mistakes, configuration tips, and several usage examples.
Title: Securing Windows Server 2003
ISBN: 0596006853
Published: November 2004
Author: Mike Danseglio
Chapter: Chapter 4: File System Security
Publisher: O'Reilly
| Publisher | TechRepublic | File Format | |
|---|---|---|---|
| Date Published | July 2005 | Downloads | 2 |
| Format | Downloads | ||
| Topics | |||
-
Did you find this white paper useful?
White Paper RSSBalancing Security Against Productivity
DownloadWhat makes for great security? Is it about keeping the bad guys out or letting the good guys in? About defending attacks or preventing them? When IDG Research Services queried...
Novell Zenworks Endpoint Security Management: Total Control from a Single Console
Still super gluing your USB ports shut? Unauthorized access to networks, lost or stolen laptops and other mobile hardware, and theft of proprietary information or intellectual property accounted for more...
Secure Desktop On-Demand Webcast
The desktop or endpoint is one of the most vulnerable parts of your environment. Threats are everywhere. You have users who love to experiment with device settings (only to wonder...
Testing Database Security
The Oracle Database 10g: New Features for Administrators exam enables Oracle Certified Professionals (OCPs) certified on Oracle9i Database to upgrade their certifications to Oracle Database 10g. This is the only...
Automating McAfee ePO: Practical Ways to Use McAfee ePolicy Orchestrator 4.0 to Save Time and Improve Compliance
This paper describes some of the most beneficial ways to apply new McAfee ePolicy Orchestrator (ePO) 4.0 workflow automation and management tools. These new ePO capabilities will help to eliminate...
