Securing Windows Server 2003

Rating:
Summary: A must have for any IT professional
Review: After reading this book, I have to give credit where credit is due. Mike Danseglio brings foward a well written and easy to follow guide into practical application of security techniques in todays vulnerable environment. This book is a must have for the beginner to the expert. With the use of this book, I was able to apply numerous tips that the book suggested, and achieved new levels of security I didnt know were possible. From cover to cover, this is a one stop warehouse of vital security solutions and awareness. Go buy it !!!

Rating:
Summary: A Great Security Reference Manual
Review: In "Securing Windows Server 2003" the author does a superb job of providing a blueprint on how to secure a Windows 2003 system that is accessible by the world. Similar to a checklist, you will find yourself going through this book using it as a guideline as you rollout your Server 2003 installations and double-checking existing ones already live.

The author does a great job of focusing on the task at hand, security, and does not try to do what so many others have -- make this an entire book about implementing 2003. By keeping to the point, the book itself becomes a desk reference instead of another bookshelf weight. Many of the tasks focused on in the book can be bookmarked and refered to for case scenarios during any 2003 implementation.

From understanding the basic security of a Server 2003 system, implementing Group Policy Objects, all the way up to understanding Kerbos and PKI cryptography, this book covers each topic in enough detail to give the reader a firm ground on which to check and implement procedures.

One of the strong features of the book is the author actually walks you through many of the steps you need to take -- with screenshots where appropriate. He does not leave you stranded in the middle of a procedure with only a vague mention of what task to perform next. Experienced administrators will appreciate the fact that he goes into detail to cover all the bases while newer administrators will appreciate the hands-on approach and step-by-step instructions.

Overall, a great security book that should become a standard on any System Administrators bookshelf. Server 2003 has introduced a new era into the Microsoft Server family, one which not all the old tricks and practices of Windows 2000 apply -- this book will help you learn the new ropes and get up to speed quickly.

Rating:
Summary: great security book
Review: When I bought this book, I didn't expect much. Another treatment of Windows security. A boring rehash of the same old stuff with a few new tidbits that I could use.

I was wrong. This book is excellent! It shows you exactly how to do things the right way. There's no ambiguous lectures or hints here. It says "Do this and you're safe; do that and you're vulnerable." I love that kind of directness. The book also breaks things down so a beginner can learn while they do. I didn't find these sections too valuable myself, but they were easily skipped and are there for the people still ramping up. And it covered pretty much all the security topics I was looking for, including DHCP and PKI. While a couple of important topics were a little light such as IIS, I've already got books specifically on those that I can use.

If you have to deal with Windows 2003 security and you want a direct, no-nonsense approach, buy this book. I wouldn't want it to be the only book on my shelf, but I find it valuable to have it there.


Rating:
Summary: Beware!
Review: With the increasing problems of attacks against computers, sysadmins who run Microsoft's Windows Server 2003 need to keep their guard up. The strong market share of servers using this operating system makes them attractive targets. So Donseglio offers timely and prudent actions you can easily understand and implement.

The book goes into various aspects for you to check. Like safely implementing a public key infrastructure, and receiving and issuing certificates. Plus it talks about the perils of a system thread running insecure code. He recommends that you only run third party code that is signed by a reputable authority. Specifically, you should take every precaution if you get a new device driver. On this OS, and indeed on any OS, device drivers have an intimate and low level relationship with it and with the hardware. A rogue device driver might be able to cause physical damage. So beware!