Microsoft 在 Windowsbeta 网站发布了 Microsoft Windows Server 2003 SP1 和 Windows XP x64 Edition 的最新技术测试版本, 内部版本1247.IDS,已经在Windowsbeta提供下载。
本地下载已经提供。
IE中新增Information Bar, Addon Manager等一系列XPSP2中的安全功能。
新增Wireless Network Setup Wizard。
WMP升级到10.00.00.3647。
SCW更新:
*Security Configuration Wizard Update*
Security Configuration Wizard (SCW) is an attack surface reduction tool being introduced with Windows Server 2003 SP1. This SP1 refresh contains an updated version of SCW that has many new features and capabilities that were not available in the original SP1 beta. Specifically,
... A completely new firewall configuration component.
SCW is the recommended way of configuring the Windows Firewall on Windows Server Systems.
Automatic port detection for non-default configurations, multiple instance scenarios, and 3rd Party Applications
... Additional Server Role definitions.
SCW now contains definitions for over 60 different server roles. Including roles for applications like Exchange, SQL Server, etc.
... Compliance analysis support.
Allows you to determine whether servers are in compliance with expected policies.
... Complete command line tool support.
Supports deploying and analyzing security policies remotely en-masse.
... New support for:
IIS-specific settings
Audit policy settings
Additional registry values
Group Policy-based deployment of SCW-generated security policies
Inclusion of security INF templates.
Centralized knowledge base repository
Clustered environments
Multi-level rollback
To install SCW:
Install SP1
Install SCW from Add\Remove Windows Components
To run SCW:
Start/Run/SCW or launch from Administrative Tools
To use the SCW command line tool:
scwcmd.exe
To test SCW:
Launch the wizard.
Select a server to lock down.
Answer the wizard's questions as appropriate.
Apply the resulting security policy.
Verify that the server continues to function as expected with the reduced attack surface