How to back up the security settings of a win2003 server

With ntbacku, there is a backup of the system state

Direct copies are permissionless.

Because the permissions are systematic, stored in the system, and you only copy files without permissions, if you have more files, you can use the host management system to assist, which is equivalent to each different site has its own permissions, and the files and permissions configuration of all sites should be backed up before transferring.

After the overall transfer, the host management system will restore the folders and corresponding permissions one by one according to the previous backup.

1. Server security settings.

1.Installation and Setup, 2Web directory permission settings, 3SQL permission settings.

2. Routine security settings of the system.

4.Updates to system patches; 5.backup systems; 6.

Install commonly used software; 7.First, close the ports that you don't need, turn on the firewall, and import the IPsec policy. 8.win2003 server protection against marine trojan security settings, 9

Renamed Insecure Component, 10System Security Policy, 11Network settings [here set for NIC parameters], 12

PHP Security, 13Modify 3389 remote connection port, 14Local Policy --- User Rights Assignment, 15

In the security settings Local Policy - User Rights Assignment, Denial of Login via Terminal Services, 16Computer Management of Local Users and Groups, 17Delete the default share.

Third, and the most important point is to choose a suitable data center (data center) for you.

The server usually still needs to install anti-virus software, or you need to configure an ISA firewall.

First of all, apply the system patch, account policy (including closing the guest account, changing the name of the administrator), prohibiting the establishment of empty connections, disabling the default sharing, and closing related insecure services (telnet, alerter, etc., depending on the specific situation) If necessary, you can disable the server service port), disable port 445, and IIS security settings.

This setting is mainly used as a server application, first of all, it is best to disable the GUST account, and secondly, it is best to update the system security patch in real time, and in terms of security settings, the default share mode of the default drive letter should be disabled, and the write sharing of the shared directory should be minimized according to the needs, and the password of the shared account must meet the corresponding security specifications.

The way to prevent it is also simple:

1. Program ** vulnerabilities, which require security-conscious programmers to fix, usually only after being hung up to know which aspect to start fixing;

2. It can also be solved by security companies, and domestic security companies such as SineSafe and NSFOCUS are more professional.

3.The "read", "write", "execute", "whether to allow scripts", etc., can effectively reduce the chance of being trojanized by using the space of the long-established virtual space provider.

Do the firewall and ACL on the front-end router of this server

Enable NAT translation on this server and disable unnecessary services.

is only a little learned, and you know this.

Please see here for details.

Divided into 1 and 2, you take a closer look.