Security Policy - Revision history

Agrace at 18:03, 3 May 2022

2022-05-03T18:03:57Z

← Older revision		Revision as of 18:03, 3 May 2022
Line 1:		Line 1:
			[[Category:Cyber Security]]
	= Group Policy =		= Group Policy =

Bsanders: Added preface section

2019-04-29T01:41:35Z

Added preface section

← Older revision		Revision as of 01:41, 29 April 2019
Line 1:		Line 1:
			= Group Policy =

			Security Policy is done within [[Group Policy]]. If you are unsure what [[Group Policy]] is, or what it does, etc., visit the [[Group Policy]] page or the page on our domain: [[CISCOACA.local]] for more information.

	= Global Security Policy =		= Global Security Policy =

Bsanders: /* Global Security Policy */ Formatting

2018-10-18T20:18:28Z

Global Security Policy: Formatting

← Older revision		Revision as of 20:18, 18 October 2018
Line 2:		Line 2:

	Our Global security policy is located in the Group Policy Objects folder, and is named Security Policy. All of the configurations made by this are too long to list, but they are all located in <code>Computer Configuration/Policies/Windows Settings/Security Settings</code> within the object.		Our Global security policy is located in the Group Policy Objects folder, and is named Security Policy. All of the configurations made by this are too long to list, but they are all located in <code>Computer Configuration/Policies/Windows Settings/Security Settings</code> within the object.

	~~== Local Security Policy ==~~

	Locally on all of the servers, I have edited their settings to require auditing, this is done on the GPO security policy as well, but just in case some settings do not configure properly it will always audit what is happening to the server.

	== Default Domain Controllers Policy ==		== Default Domain Controllers Policy ==
Line 22:		Line 18:

	The install account is the one that we currently use for our service account, and should currently be the only one in the Service Admins group. The install account is located in the Admins folder in CiscoAcademy.		The install account is the one that we currently use for our service account, and should currently be the only one in the Service Admins group. The install account is located in the Admins folder in CiscoAcademy.

			= Local Security Policy =

			Locally on all of the servers, I have edited their settings to require auditing, this is done on the GPO security policy as well, but just in case some settings do not configure properly it will always audit what is happening to the server.

Bsanders: /* Global Security Policy */ Added info about local settings on the servers

2018-10-18T20:17:42Z

Global Security Policy: Added info about local settings on the servers

← Older revision		Revision as of 20:17, 18 October 2018
Line 2:		Line 2:

	Our Global security policy is located in the Group Policy Objects folder, and is named Security Policy. All of the configurations made by this are too long to list, but they are all located in <code>Computer Configuration/Policies/Windows Settings/Security Settings</code> within the object.		Our Global security policy is located in the Group Policy Objects folder, and is named Security Policy. All of the configurations made by this are too long to list, but they are all located in <code>Computer Configuration/Policies/Windows Settings/Security Settings</code> within the object.

			== Local Security Policy ==

			Locally on all of the servers, I have edited their settings to require auditing, this is done on the GPO security policy as well, but just in case some settings do not configure properly it will always audit what is happening to the server.

	== Default Domain Controllers Policy ==		== Default Domain Controllers Policy ==

Bsanders: Created and wrote basics of our configuration.

2018-10-18T20:16:04Z

Created and wrote basics of our configuration.

New page

= Global Security Policy =

Our Global security policy is located in the Group Policy Objects folder, and is named Security Policy. All of the configurations made by this are too long to list, but they are all located in <code>Computer Configuration/Policies/Windows Settings/Security Settings</code> within the object.

== Default Domain Controllers Policy ==

This policy controls the administration of the domain controllers. It has some security settings configured to disallow the Service Admins from accessing them.

These configuration items are located in: <code>Computer Configuration/Policies/Windows Settings/Security Settings/Local Policies/User Rights Assignment</code>

The configurations that stop Service Admins from accessing the servers are: Deny access to this computer from the network, deny log on locally, Deny log on through Remote Desktop Services.

=== Service Admins ===

This is a group that is within the Users folder in our active directory. It is used to define users that should have admin rights, but should not have access the the servers. Users put in this group also should be in the Domain Admins group.

==== Install ====

The install account is the one that we currently use for our service account, and should currently be the only one in the Service Admins group. The install account is located in the Admins folder in CiscoAcademy.