18. Securing Windows at the OS Level

Securing Windows at the OS Level

Recap:

• Use Security Standards, such as NIST, and best practices for securing your Windows environment.
• If your organization is subject to regulatory compliance, use the documentation as a guide.
• Microsoft offers resources to assist in securing their Operating Systems.
• Audit your Windows permissions and take the time to understand the requirements from the business units of your organization.

Additional Thoughts:

• Use product build sheets or create your own for future server builds. These are checklists to speed the process of configuring the server for its intended purpose and aiding in securing it more quickly.

Recap:

• Windows Services are small programs that run in the background of the Operating System.
• Windows Services are generally single-task, meaning they only perform one action.
• Disabling Services that are no longer needed reduces the attack surface of the machine.

Walkthrough

Addtional Resources

• Windows 2016 Server Security Guide
• Server 2016 Services Documentation
• Microsoft Compliance Toolkit