This one-day instructor-led clinic provides students with introductory knowledge and skills essential for the design and implementation of a more secure computing environment. It also provides students with prescriptive guidance on security update management and best practices for implementing security on Microsoft Windows Server and client computers.

Audience
Attendees will be current IT professionals with experience using Microsoft Windows 2000 Server or Microsoft Windows Server 2003 and with knowledge of Active Directory concepts. The students will be in an environment where they are responsible for aspects of security management and deployment associated with their internal network infrastructure and Internet or intranet services.

At Clinic Completion
After completing this clinic, students will be able to:

• Establish the business case for security.
• Apply Security Risk Management principles to ensure that security practices reflect real business needs.
• Use multiple layers of defense to minimize the possibility of successful attacks against an organization.
• Respond effectively to security incidents.
• Describe specific attack scenarios and implement measures to combat them.
• Implement best practices for maximizing security in a networked environment.
• Discuss the 10 immutable laws of security.
• Understand the processes that Microsoft has developed to respond to system attacks and how to apply a successful patch strategy.
• Use patch management tools and processes to implement patch management in their organizations.
• Describe the Microsoft strategy for continuing to deliver improved patch management tools, technologies, and information to customers.
• Understand the importance of server security.
• Use Active Directory Group Policy to manage server security.
• Apply the Windows 2003 Security Guide templates for server hardening.
• Understand the additional security features included with Windows Server 2003 Service Pack 1.
• Use the Security Configuration Wizard to increase security for computers running Windows Server 2003 SP1.
• Manage domain controller policy settings.
• Understand the requirements for securing client computers in environments where Windows Server 2003, Windows 2000, and Microsoft Windows NT 4.0 servers are present.
• Increase security for stand-alone clients.
• Use Software Restriction Policy to manage application security for computers in an organization.
• Understand antivirus strategies and best practices for deploying antivirus software.
• Understand firewall technologies and best practices for implementing a firewall.
• Understand new security features included in Microsoft Windows XP SP2.

Prerequisites
Before attending this clinic, students should have:

• Hands-on experience with Windows 2000 or Windows Server 2003 management tools.
• Experience with Active Directory and Group Policy.

Course Materials
The student kit includes comprehensive notes supporting the topics discussed.