【资料名称】：Security Administration of the APG40

【资料作者】：baby

【资料日期】：201108

【资料语言】：中文

【资料格式】：DOC

【资料目录和简介】：

The contents of this document are subject to revision without notice due to
continued progress in methodology, design, and manufacturing.
Ericsson shall have no liability for any error or damages of any kind resulting
from the use of this document.
The STS application is not covered by this document.
1PURPOSE............................................................3
2PREREQUISITES.................................................3
3WINDOWS SERVER 2003....................................4
3.1GENERAL.............................................................4
3.2USER MANAGEMENT .............................................4
3.2.1APG40 User Roles...................................................4
3.2.2APG40 Standard Groups.........................................4
3.2.3APG40 Standard IO system Groups........................6
3.2.4Other groups..................................................7
3.2.5APG40 Built-in users...............................................7
3.2.6The Authority Check Systems in CP and APG40...10
3.2.7Authority Check of commands...............................12
3.2.8Setting up local users............................................17
3.2.9Convenience groups..............................................21
3.2.10Viewing User Accounts.........................................25
3.3DIRECTORY STRUCTURE .....................................28
3.3.1The System disk............................................29
3.3.2The Data disks.................................................29
3.3.3Looking at Access Control Lists............................29
3.3.4File System Integrity..............................................30
3.4NETWORKING.....................................................34
3.4.1The Network Structure...........................................34
3.4.2Master User Domain.............................................35
3.4.3Access methods......................................................55
3.4.4Internet Protocol Security – IPSec..........................81
3.4.5Ports........................................................89
3.5SECURITY LOGS ...................................................93
3.5.1Windows Server 2003 Security log..........................93
3.5.2ALOG....................................................94
3.6SERVICES ..........................................97
3.6.1List of Services......................................98
4APG40 SECURITY PATCHES.........................107
5APPLICATIONS..............................................108
5.1ANTI VIRUS .............................................................108
5.1.1Virus Protection Policy........................................108
5.1.2Some easy ways to avoid viruses..........................109
5.1.3In case of a Virus Infection on the APG40...........109
5.1.4Antivirus Signature Update..................................109
5.1.5Creating a scheduled scan Job.............................111
6APG WINDOWS 2003 OS HARDENING .............................116
6.1SFGEN COMMAND........................................................116
6.1.1Examples of sfgen command with different options........................116
6.1.2Example of secedit command to configure the new settings on the node....120
6.2NON CHANGEABLE SECURITY ITEMS ............................................121
6.3CHANGEABLE SECURITY ITEMS ....................................................121
6.3.1Security Settings\Account Policies\Password Policy.....................121
6.3.2Security Settings\Account Policies\Account Lockout Policy..............122
6.3.3Security Settings\Local Policies\Audit Policy....................................122
6.3.4Security Settings\Local Policies\User Rights Assignment..................123
6.3.5Security Settings\Local Policies\Security Options..............................124
6.4RECOMMENDATIONS:...................................................126
7TERMINOLOGY............................................128
7.1ACRONYMS ..........................................................................128
8REFERENCES...............................................130
A.USER GROUP AUTHORITY..........................132

[ 本帖最后由 laomaoyixin 于 2011-9-5 16:43 编辑 ]