WINK Checklist v - Section MSE安全攻防资料.docx

Manual System Check Procedures FOR WINDOWS 2000 pROFESSIONAL AND SERVER.This section details the procedures that may be performed on the Windows 2000 console that will allow the reviewer to analyze the system for security vulnerabilities. Analysis determines the composite effect Local policy and of Group Policy on WIN2K Professional and Server, and to Domain Controller policy on Domain Controllers. Some procedures will differ on Domain Controllers. These will be highlighted throughout the document when applicable.The following applications are used during the manual Security Readiness Review process:Windows ExplorerComputer ManagerServer ManagerMicrosoft Management ConsoleControl PanelRegistry EditorDumpSecCommand PromptThe DumpSec application is an analysis tool that permits the user to systematically review ACL, audit, and user information from the local system. This tool is not included with the basic installation of Windows 2000, but may be acquired or download from SomarSoft, Inc. ().The findings discovered during the execution of these procedures may be mapped to the PDIs found in Section 2.NOTE: In a Windows 2000 Domain, the review should be done with the reviewer logged on to the domain. The review will then reveal the actual effective settings on the box that may result from a combination of Group and Local policies.A “?” symbol appearing in a section title indicates a Platinum Standard setting.A “?” symbol appearing in a section indicates that the SRR script may return a false finding. The reviewer should review the finding output to determine if the potential finding is valid.The label “(Future Check)” next to a section title is to alert sites that this is a new check that will become active in the near future. This is meant to give sites sufficient time to incorporate these changes prior to being held accountable in a Security Readiness Review.5Manual System Check Procedures FOR WINDOWS 2000 pROFESSIONAL AND SERVER.5-15.1Updating the Windows 2000