Active Directory Tip: Securing an administrator's computer

[SearchWin2000.com]

Title: Active Directory Tip

May 25, 2004 Published by  SearchWin2000.com Active Directory Tip Issue Sponsored By: SearchWin2000.com White Papers IN THIS ISSUE: Securing an administrator's computer Improving the default domain controller GPOs Secure administration and administrator privileges Help with Runas in Active Directory The 2004 Microsoft Report Card SearchWin2000.com White Papers Keep up-to-date on the latest in Windows with the SearchWin2000.com white papers. Read about featured topics such as active directory, security, systems management, .NET and Web services and much more! Click Here. Securing an administrator's computer [James Michael Stewart] In a modern Microsoft environment, the Active Directory database is arguably one of the essential assets of the network. Thus protecting AD is an important part of maintaining a productive environment. This tip discusses increasing security by locking down the desktop systems that administrators use to interact with AD. Improving the default domain controller GPOs [James Michael Stewart] When Windows Server 2003 is used to establish an Active Directory based network, there are two default GPOs: the default domain GPO and the default domain controller GPO. These GPOs are configured to provide a basic minimal level of security for your domain network and its domain controllers. There are several ways to improve upon the default settings in these two GPOs. Secure administration and administrator privileges [James Michael Stewart] Even if you have installation and setup procedures that ensure a secure domain controller and you have a tightly controlled physical access control system, you still have to have reliable people perform administration in a secure and controlled manner. This tip explains why. Help with Runas in Active Directory [Kevin Reynolds] Runas works well with some programs but not with Explorer -- you have to log in and out each time. This tip examines a free utility called 2xexplorer that may reduce the hassle. TOPICS: The 2004 Microsoft Report Card Do the latest ratings surprise you? If so we'd love to hear why! Also be sure to check out last year's survey. TOPICS: Know-IT-All Chapter Quiz: Can you handle the challenge? So you think you know a thing or two about Windows Server 2003, eh? We challenge you to test your skills by taking our new quiz! Download the Chapter of the Week, take the quiz and send us your score. You may win a free copy of this week's featured book, "Microsoft Windows Server 2003 Unleashed, 2nd edition" by Rand Morimoto et al. ASK THE EXPERTS: Is there a way to send a popup message to all AD users? Dear Serdar, I need a way to send a popup message to all Active Directory users that are logged on. Is this possible? Contact Us Sales For sales inquiries, please contact us at: [EMAIL PROTECTED] Editorial For feedback about any of our articles or to send us your article ideas, please contact us at: [EMAIL PROTECTED] Free E-Newsletters! Select e-newsletters you would like to receive via e-mail! SearchWin2000: Administrator Tips Not a Member? We'll activate your membership with your subscription. ABOUT THIS E-NEWSLETTER This e-newsletter is published by SearchWin2000.com, a targeted Web site from TechTarget, the most targeted IT media and events company. Copyright 2004 TechTarget. All rights reserved. To unsubscribe from "Active Directory Tip": Go to unsubscribe: http://searchWin2000.techtarget.com/u?track=NL-23 Please note, unsubscribe requests may take up to 24 hours to process; you may receive additional mailings during that time. A confirmation e-mail will be sent when your request has been successfully processed. Contact Us: SearchWin2000 MemberServices 117 Kendrick Street, Suite 800 Needham, MA 02494