Configuration Management at Operating System Level. Module 4 Protection of Information Systems and Information Assets

Transcription

1 Configuration Management at Operating System Level Module 4 Protection of Information Systems and Information Assets 1

2 Table of Contents Introduction Password Policy Password Policy- How to Define? Audit Policy Audit Policy- How to Define? Users Rights Assignment User Rights Assignment- How to Define? Security Options Security Options- How to Define? Case Study 2

3 Introduction (1/2) Every organization defines it s IT Security policies and Security standards for network, servers, desktops, handheld devices etc. IT / Server Security Team needs to ensure that all servers (Windows, Unix, Linux etc.) have been configured in accordance with the organization's IT Security Policies and Security Standards. 3

4 Introduction (2/2) In MS Windows server, IT/Server Security team needs to configure the following parameters: Password Policy Audit Policy User Rights Assignment Security Options 4

5 Review Local Security Policy 5

6 Password Policy The security provided by a password depends on the passwords being kept secret at all times. Thus, a password is vulnerable to compromise whenever it is used or stored. Password policies can be set depending on the needs of the organization. For e.g. it is possible to specify minimum password length, maximum and minimum password age etc. It is also possible to prevent users from reusing passwords and ensure that they use specific characters in their passwords, making the passwords more difficult to crack. 6

7 Password Policy- How to Define? (1/2) Start Control Panel Administrative tools Local Security Policy Run command prompt Type secedit.exe and press enter Expand Account Policies Double click on Password Policy. 7

8 Password Policy- How to Define? (2/2) Security Settings Account policies Password policy. On right pane, select Minimum password length (or any other setting which is required to be changed) Double click pop-up window will appear Change the setting to desired value Click OK 8

9 Create Password Go to Control Panel > User Accounts > Manage accounts 9

10 Audit Policy Before audit records are logged, an auditing policy must be established. The policy defines the types of events that will be audited for a specific user or group of users. An auditing policy specifies categories of security-related events that must be audited. When Windows server is first installed, all auditing categories are turned off. By turning on various auditing event categories, the administrator can implement an auditing policy that suits the security needs of the organization. 10

11 Audit Policy Go to Control Panel > System and Security> Administrative Tools> Local Security Policy 11

12 Audit Policy- How to Define? Run command prompt Type secedit.exe press enter Expand Local Policies Double click on Audit policy To change any of the Audit Policy, double click on the policies in the right pane Change the setting to desired value Click OK 12

13 Users Rights Assignment User Rights Assignment policies determines which users or groups have logon rights or privileges on the computer. User Rights Assignment govern the methods by which a user can log on to a system. User rights include logon rights and permissions. Logon rights control who is authorized to log on to a computer and how they can log on. User rights permissions control access to server and domain resources. 13

14 User Rights & Privileges User Rights apply to user accounts, and Permissions attached to objects Assigning User Rights Start> Control Panel>System and security>administrative Tools> Local Security Policy 14

15 User Rights Assigning User Rights Start> Control Panel>System and security>administrative Tools> Local Security Policy Click on User Rights assignment 15

16 Privileges Permissions are attached to objects Right Click on Properties > Security Tab > Advanced or Edit 16

17 User Rights Assignment- How to Define? Run command prompt Type secpol and press enter Expand Local Policies Double click on User Rights Assignment. Local policy 17 Domain Policy (Push by central server/wsus)

18 Security Options The Security Options section of Windows Server configures server s security settings for Administrator and Guest account names, digital data signatures, access to floppy disk and CD drives, driver installation behavior, logon prompts etc. 18

19 Security Options- How to Define? Run command prompt Type secpol and press enter Expand Local Policies Double click on Security Options. 19

20 Case Study Mr. Patel is IT Security Manager in ABC limited and is responsible for Windows Server Security. Some potential risks have been identified in the Windows Server security by Internal Audit team. You have been asked to update the Security settings and Password Policy on all Windows servers. How you will go about it? 20