Skip to content

Windows 2000 Security: Locking Down Win2K

Keith Nugent

Keith Nugent explores windows 2000 security: locking down win2k at DEF CON 9, examining windows-2000 and practical defenses.

Summary

Architecture and Background

Keith Nugent - Windows 2000 Security: How to lock down your Win2k boxes Windows 2000 provides a lot of new security features that were previously not available in earlier versions. The NT line, however, has never been considered very secure right out of the box.

Vulnerability Analysis

We'll be talking about how to use NTFS permissions, Default Security templates, Custom Security templates, and Group Policy to lock down a Win2k box. We'll look at what level of security is applied by default on a Win2k box, how to analyze these settings against proposed settings, and how to apply identical settings across multiple boxes.

Exploitation and Demonstrations

Keith Nugent has been playing with computers since his father first brought home an Apple iic. Being the youngest child, it thrilled him to no end to have something that would respond to HIS commands, as he was used to being the one who followed commands.

Remediation and Defensive Strategies

Keith toyed with Apples and PC's for the next few years while he did other things, like grow up, go to college, run a business, and drive a tractor-trailer around the country. Then, a few years back, as tends to happen, he was the guy who was always fixing, operating, and training others on the computer. So he gave in and became the network administrator. Now years later, he's given up the pager and 3am-the-sky-is-falling phone calls of network administration to train full time. Keith is currently the technical training supervisor for a large computer training center in Chicago, IL.

Related talks

Main Stage·52 min

  • DEF CON
  • Blue Team
  • Date: Aug 2002
  • Location: Las Vegas

Jay Beale

Jay Beale - Attacking and Securing FTP The Unix FTP servers have been called 'the IIS of the Unix world' for their frequent and potent vulnerabilities.

bastille-linuxsystem-hardeninglinux-security+1