NETWORK WORLD NEWSLETTER: DAVE KEARNS ON WINDOWS NETWORKING TIPS 11/10/04 Today's focus: Microsoft's threat mitigation guide for older NOSes
Dear [EMAIL PROTECTED], In this issue: * About Microsoft's "Windows NT 4.0 and Windows 98 Threat ��Mitigation Guide" * Links related to Windows Networking Tips * Featured reader resource _______________________________________________________________ This newsletter is sponsored by Cisco Systems Special Report: Bridging the Gap; Enterprise ROI IT professionals today don't indulge in the latest-greatest technology for their own sake; instead they concentrate efforts on projects that are most likely to help achieve business goals. Read about the challenges and opportunities when IT starts 'bridging the gap' and directly contributes to enterprise ROI. http://www.fattail.com/redir/redirect.asp?CID=87992 _______________________________________________________________ SECURTIY SUMMIT: CAN SECURITY BE A COMPETITIVE EDGE? Recently 23 prominent IT executives and academics gathered at Dartmouth College in Hanover, NH for a daylong roundtable to address such questions. CIOs and VPs from some of the largest and most well-known companies in the US shared with peers their security fears, goals, frustrations and challenges. Find out more: http://www.fattail.com/redir/redirect.asp?CID=87931 _______________________________________________________________ Today's focus: Microsoft's threat mitigation guide for older NOSes By Dave Kearns I know there are some of you still running Windows NT 4 servers because you write and tell me about it. That's why I mentioned the hands-on lab "Migrating from Windows NT 4.0 to Windows Server 2003" a couple of times recently. Now comes more evidence that Redmond is taking seriously your claims that - for whatever reason - you just can't move away from the NT 4 platform just yet. One eagle-eyed reader, who is still running NT 4 both for software and budget reasons (thanks Scott!) has pointed out a new security guide issued by Microsoft entitled "Windows NT 4.0 and Windows 98 Threat Mitigation Guide" which was published just a few weeks ago. Now Bill Gates and company still want you to upgrade, but until then, this guide "...identifies security issues in networks that include computers running the Microsoft Windows NT 4.0 and Windows 98 operating systems, and explains the best hardening strategies that an organization can use until they are able to upgrade these operating systems." In other words, while Microsoft won't rewrite code for these operating systems any more, it will point out steps you can take to minimize any threats to their security. The document, which can be downloaded or read online ( <http://www.microsoft.com/technet/security/guidance/threatmi.mspx > ), consists of eight chapters. Discounting the first ("Introduction" or "here's what we're going to say") and last ("Conclusion" or "here's what we said"), the remaining six are: * Applying the Security Risk Management Discipline to the Trey ��Research Scenario - Chapter 2 details a fictitious company ��scenario that is used to develop the recommendations in this ��guidance and explains how an IT generalist would assess the ��security risks and vulnerabilities of the network ��infrastructure. * Network Security and Hardening - Chapter 3 describes network ��security vulnerabilities and the process of hardening network ��components (including client and server computers) against these ��vulnerabilities. * Hardening Windows NT 4.0 - Chapter 4 explains how to harden ��Windows NT 4.0 (Workstation and Server) by establishing a ��baseline for the system and then applying specific hardening ��measures. * Hardening Windows 98 - Chapter 5 explains how to harden ��Windows 98 clients and applications, and describes methods for ��applying patches, updates, and security policies to computers ��running Windows 98. * Patch Management - Chapter 6 shows how to find out about new ��updates in a timely manner, implement them quickly and reliably ��throughout your organization, and ensure that they are deployed ��everywhere. * Anti-virus -Chapter 7 describes the importance of anti-virus ��software and policies as well as the security and supportability ��of client-based and server-based anti-virus solutions. Some of these are generalist topics that apply to just about any operating system (such as the need for anti-virus products), but most of the tips apply specifically to the older systems that may be inhabiting your network. Still, upgrading to the most current systems is the best security solution. As the guide concludes: "The information presented in this guidance will allow you to identify secure networking infrastructure, create baseline configurations for servers and workstations running older operating systems, define procedures for sound patch management, and institute a proactive anti-virus strategy. Together, these techniques can help extend the life of important assets until organizations are able to upgrade to newer, more secure operating systems." _______________________________________________________________ To contact: Dave Kearns Dave Kearns is a writer and consultant in Silicon Valley. He's written a number of books including the (sadly) now out of print "Peter Norton's Complete Guide to Networks." His musings can be found at Virtual Quill <http://www.vquill.com/>. Kearns is the author of three Network World Newsletters: Windows Networking Tips, Novell NetWare Tips, and Identity Management. Comments about these newsletters should be sent to him at these respective addresses: <mailto:[EMAIL PROTECTED]>, <mailto:[EMAIL PROTECTED]>, <mailto:[EMAIL PROTECTED]>. Kearns provides content services to network vendors: books, manuals, white papers, lectures and seminars, marketing, technical marketing and support documents. Virtual Quill provides "words to sell by..." Find out more by e-mail at <mailto:[EMAIL PROTECTED]> _______________________________________________________________ This newsletter is sponsored by Cisco Systems Special Report: Bridging the Gap; Enterprise ROI IT professionals today don't indulge in the latest-greatest technology for their own sake; instead they concentrate efforts on projects that are most likely to help achieve business goals. Read about the challenges and opportunities when IT starts 'bridging the gap' and directly contributes to enterprise ROI. http://www.fattail.com/redir/redirect.asp?CID=87993 _______________________________________________________________ ARCHIVE LINKS Breaking Windows networking news from Network World, updated daily: http://www.nwfusion.com/topics/win2000.html Archive of the Windows Networking Tips newsletter: http://www.nwfusion.com/newsletters/nt/index.html _______________________________________________________________ FEATURED READER RESOURCE NEW! Website dedicated to Networking for Small Business now available The editors of NW Fusion and PC World have combined all their expert advice, authority, and know-how into a powerful new tool for small businesses, the new Networking for Small Business website. Get news, how-to's, product reviews, and expert advice specifically tailored to your small business needs. Find help with Security, Broadband, Networking, Hardware, Software, and Wireless & Mobile technology at: <http://www.networkingsmallbusiness.com/> _______________________________________________________________ May We Send You a Free Print Subscription? You've got the technology snapshot of your choice delivered at your fingertips each day. Now, extend your knowledge by receiving 51 FREE issues to our print publication. Apply today at http://www.subscribenw.com/nl2 International subscribers click here: http://nww1.com/go/circ_promo.html _______________________________________________________________ SUBSCRIPTION SERVICES To subscribe or unsubscribe to any Network World e-mail newsletters, go to: <http://www.nwwsubscribe.com/Changes.aspx> To unsubscribe from promotional e-mail go to: <http://www.nwwsubscribe.com/Preferences.aspx> To change your e-mail address, go to: <http://www.nwwsubscribe.com/ChangeMail.aspx> Subscription questions? Contact Customer Service by replying to this message. This message was sent to: [EMAIL PROTECTED] Please use this address when modifying your subscription. _______________________________________________________________ Have editorial comments? Write Jeff Caruso, Newsletter Editor, at: <mailto:[EMAIL PROTECTED]> Inquiries to: NL Customer Service, Network World, Inc., 118 Turnpike Road, Southborough, MA 01772 For advertising information, write Kevin Normandeau, V.P. of Online Development, at: <mailto:[EMAIL PROTECTED]> Copyright Network World, Inc., 2004 ------------------------ This message was sent to: [EMAIL PROTECTED]
