Securing Windows Server 2003

For those of you who have not yet met Mike Danseglio, you're not quite prepared for the surpise, as well as the pleasure of getting to know him.  Mike, for me at least, ended up being nothing like I pictured him.  I'll not describe him, as the event has merit for each individual.  Suffice it to say Mike is a technologist with an interesting flair.  Not quite as 'scholarly' as Jesper Johanssen, but not as flamboyant as Steve Riley.  However, he does rate the comparison to the two latter - he's really that good with this stuff.

So, why the introduction and diatribe on Mike?  Well, his book just recently hit the shelves - just in time for that holiday gift giving for the Security geek that you know and love (even if that Geek is you!).

The book is published by O'Reilly and is edited by Robbie Allen (Active Directory, Active directory Cookbook, fellow MVP - just to name a couple).  Appears that Robbie is managing a series of books for O'Reilly - but that's my take, not to be confused with the truth.

Securing Windows Server 2003 (which I had the honor and pleasure of tech editing) is a concise and fairly complete treatment of what is available in the Server platform to secure the server as well as communications to and from it - plus, it extends out to client and peer system security as well.  Mike's treatment of the subject is very readable - at least as readable as technical material goes.  But, make no mistake - just because it's readable, it shouldn't be passed over as being marginal.  This is really good, accurate information on how to secure your server and to mitigate those day-to-day issues that we face as security professionals.

The Table of Contents reads as such:

1.  Introduction to Windows Server 2003 Security

2.  Basics of Computer Security

3.  Physical Security

4.  File System Security

5.  Group Policy and Security Templates

6.  Running Secure Code

7.  Authentication

8.  IP Security

9.  Certificates and Public Key Infrastructure

10. Smart Card Technology

11. DHCP and DNS Security

12. Internet Information Services Security

13. Active Directory Security (written by Derek Melber)

14. Remote Access Security

15. Auditing and Ongoing Security

Appendix: Sending Secure Email