Security Advisor


Giving Them the (Small) Business

Microsoft's Small Business Server 2003 is a big leap forward for security.

Cross Certification Trusts

Windows Server 2003 provides a way to implement trusts among Certification Authority hierarchies selectively. Here’s how it works.

Exercises in Trust

Setting up forest trusts can be tricky. Here’s a step-by-step instruction guide.

Does Windows Endanger Society?

Security study faulty at many levels; let me count the ways.

Trust in Windows Server 2003

Trusts have changed significantly on Windows Server 2003, including the concept of forest trusts. Here's a primer.

Windows Services à la Carte

Windows Server 2003 installs fewer services by default, and installs others in a disabled state. Here’s a guide to what they do, and whether you might need them or not.

A 12-Step Plan for File Server Security

Securely bringing a Windows file server on the network may not sound difficult. But when it's running Windows Server 2003, there's a lot you need to know to do it right.

Locking up the Office

Office XP is a big product, one that requires close scrutiny to properly lock down.

Securing Windows 2003 the First Time

There are special considerations when bringing up the first domain controller in the first domain of your new Windows 2003 forest.

Auditing Patch Management

John needed a way to track and produce management-style reports on patches across his enterprise. Roberta to the rescue!

Windows and Common Criteria

Microsoft heavily touted its Common Criteria certification for Windows 2000. But what does that mean?

Protect Your PDAs, PDQ!

You know about security for networks and laptops. But what about security for hand-helds? What? You don't have a plan?

Palladium: Blessing or Curse?

Microsoft is touting its next-generation secure computing infrastructure as a giant leap for mankind. Not everyone agrees.

A Few of My Favorite Things

So many security toys, so little time.

Domain Controller Lockdown

Implement Group Policy to automate the process of locking down domain controllers.

Subscribe on YouTube