You are in Training / Microsoft / Security / Course MS2801 / Course Outline

MS2801 Microsoft Security Guidance Training I

Session 1: Essentials of Security

This session provides information essential for the design and implementation of a more secure computing environment. The session covers important security concepts and discusses the need for establishing a process for security within an organization. Also included is an overview of Windows XP SP2 security features.

Topics

  • Business Case

  • Security Risk Management Discipline

  • Defense in Depth

  • Security Incident Response

  • Best Practices

  • 10 Immutable Laws of Security

    Session 2: Implementing Security Patch Management

    This session provides security best practices and available tools and technologies to implement a patch management process and strategy within an organization. The session covers the patch management lifecycle and demonstrates how tools such as Microsoft Baseline Security Analyzer and Software Update Services can be used to quickly and effectively respond to published security bulletins and establish patch compliance across an infrastructure.

    Topics

  • Patch Management Overview

  • Patch Management Process

  • Patch Management Tools

  • Future Road Map

    Session 3: Implementing Server Security on Windows 2000 and Windows Server 2003

    This session provides prescriptive host hardening guidance for increasing security on servers used in legacy, enterprise client, and high-security environments. The session discusses configuring the domain infrastructure through Active Directory and applying security templates to establish security baselines for domain controllers and member servers operating in various roles.

    Topics

  • Introduction to Securing Servers

  • Core Server Security

  • Active Directory Security

  • Hardening Member Servers

  • Hardening Domain Controllers

  • Hardening Servers for Specific Roles

  • Hardening Stand-Alone Servers

    Session 4: Implementing Client Security on Windows 2000 and Windows XP

    This session describes the requirements for increasing security on client computers in environments where Windows Server 2003, Windows 2000, and Windows NT 4.0 servers are present. The session covers the use of Group Policy and Administrative Templates to secure Windows 2000 and Microsoft Windows XP installations and provides guidance on software restriction policies, antivirus strategies, and firewall technologies. This session also introduces the new security features available in Windows XP SP2 and discusses configuring Microsoft Office and Microsoft Internet Explorer to improve client application security.

    Topics

  • Introduction to Securing Clients

  • Core Client Security

  • Antivirus Software

  • Client Firewalls

  • Securing Clients with Active Directory

  • Using Group Policy to Secure Clients

  • Securing Applications

  • Software Restriction Policy

  • Local Group Policy Settings for Stand-Alone Clients

    About Microsoft Clinics

    Microsoft Official Clinic learning products provide students with technical information on Microsoft products or technologies while discussing real-world considerations for their implementation. Clinics highlight features and functionality through product demonstrations.