Hardening W2k3 server for use as an Oracle DB server.

[pmeswani]

Thanks all. I'll follow your links and hopefully get a result.

If it works out, my rate is £150 per link.

[Svalbaard]

Thanks all. I'll follow your links and hopefully get a result.

[the_duderama]

There is a pre-confiured hardened security template available as standard with win 2k3, just apply that:

http://support.microsoft.com/kb/816585

[Incognito]

Does anyone know of a guide anywhere for doing this that I can print off? I did have a browse round the web but couldn't find anything comprehensive.

Many thanks.

Do it like the experts.

http://www.nsa.gov/ia/guidance/secur...es/index.shtml

http://iase.disa.mil/stigs/index.html

[JoJoGabor]

Here's the Microsoft guide...

http://www.microsoft.com/downloads/d...displaylang=en

[pmeswani]

Thanks for this - I'm sure they will come in useful at some point.

I did title the thread quite specifically though; "hardening Win2k3" rather than "hardening Oracle" itself. I'm not a server O/S specialist so was looking for a Win2k3 hardening guide i.e. to harden the server before I do the Oracle install, at which point I can most likely make use of the links posted above.

Thanks again.

Sorry about that... I did read in between the lines a bit and assumed that Oracle was installed and that the hardening was post-Oracle-Install. Windows 2k3 has a Security Configuration Wizard that can be installed via the Add/Remove programs / Windows Setup. I hope the below link helps.

http://www.google.co.uk/search?sourc...ard&meta=lr%3D

[Svalbaard]

Thanks for this - I'm sure they will come in useful at some point.

I did title the thread quite specifically though; "hardening Win2k3" rather than "hardening Oracle" itself. I'm not a server O/S specialist so was looking for a Win2k3 hardening guide i.e. to harden the server before I do the Oracle install, at which point I can most likely make use of the links posted above.

Thanks again.

[pmeswani]

Does anyone know of a guide anywhere for doing this that I can print off? I did have a browse round the web but couldn't find anything comprehensive.

Many thanks.

I assume that the following links are of no use to you then?

http://www.databasesecurity.com/orac...b_database.pdf

http://www.oracle.com/technology/pub...own/index.html

http://www.blackhat.com/presentation...-04-milroy.pdf

Use the Security Configuation Wizard that comes with W2k3 (You will need to install it viat Add/Remove Programs if not done already).

w2k3+lockdown+with+oracle was what I used to get some of the above urls. Hope this helps.

[Svalbaard]

Does anyone know of a guide anywhere for doing this that I can print off? I did have a browse round the web but couldn't find anything comprehensive.

Many thanks.