Eicon Networks S92 Instrukcja Użytkownika Pobierz pdf (Strona 44)

YuChakTinMichael‘sGIACGCFWProjectAssignment

Page 44

Administratorsgroup.WindowsNTServer, likeotheroperatingsystems,allows

privilegeduserswhoareadministratorsaccesstoallresourcesinthesystem.For

installationsthatwantenhancedsecurity,strongencryptionofaccountpassword

derivativeinformationprovidesanadditionallevelofsecuritytoprevent

Administratorsfromintentionallyorunintentionallyaccessingpasswordderivatives

usingRegistryprogramminginterfaces.

ThisfilehasbeenpostedtothefollowingInternetlocation:

ftp://ftp.microsoft.com/bussys/winnt/winntpublic/fixes/usa/nt40/hotfixespostsp2/secf

ix/”

8

Step6Strengthentheaccountandauditsettings.

ThisisthestepthatIaddtothelistbasedoninformationprovidedbythearticle

“TechnicalReference:NTServer4.0HardeningGuide”

9

.

Anidealpasswordpolicyshouldincludetheelementslistedbelow:

n Enforcepassworduniquenessbyrememberinglastpasswords6

n Minimumpasswordage:2

n Maximumpasswordage:42

n Minimumpasswordlength:10

n Complexpasswords:Enabled

n Usermustlogontochangepassword:Enabled

n AccountlockoutpolicyAccountlockoutcount:5

n LockoutaccounttimeforeverResetlockoutcountafter:720minutes

“Complexpasswords”requiresthatyoudeploypassfilt.dll,aspecialDLLfilethat

comeswiththeNTservicepacks.Belowisanextractofthedescriptionofthisfile

fromtheKBarticle161990:

“MicrosoftWindowsNT4.0ServicePack2introducesanewDLLfile(Passfilt.dll)

thatletsyouenforcestrongerpasswordrequirementsforusers.Passfilt.dllprovides

8

http://support.microsoft.com/default.aspx?scid=kb;ENUS;q143475

9

http://screamer.mobrien.com/Manuals/MPRM_group/security.htm

1 2 ... 39 40 41 42 43 44 45 46 47 48 49 ... 208 209

Brak uwag

Eicon Networks S92 Instrukcja Użytkownika Strona 44