Myke wrote:
all,
How can I lock down my AD? (docs, papers, best practices...)
Check this documents from microsoft:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/DepKit/c283b699-6124-4c3a-87ef-865443d7ea4b.mspx
http://www.microsoft.com/windowsserver2003/techinfo/overview/adsecurity.mspx
And also this one:
Active Directory (AD) Security Technical Implementation Guide (STIG)
provides security configuration guidance for the implementation of
Active Directory on Microsoft Windows servers deployed within the
Department of Defense (DOD). This STIG also provides general guidance
for AD maintenance and synchronization products that might be used in
conjunction with AD.
http://iase.disa.mil/stigs/stig/Active-Directory-STIG-V1R01.pdf
--
Tomasz Onyszko
http://www.w2k.pl
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/