Security Checklist

Several steps can be taken to enhance the security of a computer publishing information on an intranet or the Internet. If you have concerns about the security of your system, review this checklist to determine if your system requires changes.

User Accounts

Review the IUSR_computername account’s rights.
Choose difficult passwords.
Manage strict account policies.
Limit the membership of the administrators group.
Set the administrator password.

For more information on user accounts, see About Access Control.

NTFS File Security

Use access control lists (ACLs), available with NTFS.
Set access control for the IUSER_computername account.
Enable auditing to track access to secure or critical files.

For information on how to change to NTFS file security, see Setting Access Permissions for a Directory or File, or consult your Windows NT documentation. For information on how to enable file access tracking, see Monitoring Activity for an Account.

Running Other Network Services

Run only the services that you need.
Check permissions on network shares.
Unbind unnecessary services from your Internet adapter cards.

Warning Be sure to check with your system administrator before unbinding services, because unbinding services could have undesirable effects on other users of your system.