|
Name |
Windows NT Level 1 Benchmark |
|
Version |
1.0.5 |
|
Status |
Final
|
| Creation
Date |
2002-01-25
|
| Revision
Date |
2003-08-28 |
| Product
Category |
Operating System |
| Vendor |
Microsoft Corporation |
| Product |
Microsoft Windows NT |
| Product
Version |
Microsoft Windows NT
|
| Product
Role |
Server Operating System |
|
Checklist
Summary |
This benchmark is intended for anyone using a
Windows NT 4.0 operating system who feels at all
responsible for the security of that system. A
Security Manager or Information Security Officer
should certainly be able to use this guide to
gather information about the security status of
a network of Windows NT 4.0 computers. The owner
of a Small Office/Home Office can use this guide
as a
straightforward aid in enhancing his or her own
personal network security. A Windows System
Administrator can use this guide to produce
explicit
scores that can be given to management to
reflect where they currently stand, versus where
they should stand with regard to security. |
| Known
Issues |
|
| Target
Audience |
|
| Target
Operational Environment |
Enterprise/SOHO
|
| Checklist
Installation Tools |
Not Available |
| Rollback
Capability |
Not Available |
| Testing
Information |
Not Available |
| NIAP/CMVP
Status |
|
| Regulatory
Compliance |
|
Comments,
Warnings, Disclaimer, Miscellaneous
|
|
| Disclaimer |
Differs for Public and Private consumers, please
read disclaimer information from the CIS web
site located at:
http://www.cisecurity.org/sub_form.html
|
| Product
Support |
|
| Submitting
Organization/Authors |
The Center for Internet Security (CIS) |
| Point
of Contact |
cis-feedback@cisecurity.org |
| Sponsor |
|
| Licensing |
Differs for Public and Private consumers, please
read licensing information from the CIS web site
located at:
http://www.cisecurity.org/sub_form.html |
| Checklist
Homepage |
http://www.cisecurity.org/ |
| Download
Package |
http://www.cisecurity.org/sub_form.html |
| Integrity |
sha1
(cis-winnt-v1.0.5.pdf) =
17b73dedd9f1079b26895ac219d905104cbf7c8d
sha256 (cis-winnt-v1.0.5.pdf) = de9ce1d205d303f4d680b0e4dc9ea92e2e008b78
894adef8d53c53fe86862414
|
| Change
History |
January 25, 2002 – Draft Version v0.9.0
released.
March 1, 2002 – Draft Version 0.9.2
released.
April 1, 2002 – First Public Release:
Version 1.0.2 released.
April 16, 2002 – Version 1.0.3 released.
Fixed misplaced settings in Account Lockout
Policy table.
August 28, 2003 – Released new Terms of Use. |
| Dependency/Requirement |
|
| References |
The Center for Internet Security –
http://www.cisecurity.org
The SANS Institute –
http://www.sans.org
Microsoft Windows Security –
http://www.microsoft.com/security
Current Critical Service Packs and Hotfixes -
http://www.microsoft.com/ntserver/nts/downloads/
default.asp
Microsoft Directory Services Client for Windows
9x/Me -
http://www.microsoft.com/TechNet/prodtechnol/
ntwrkstn/
downloads/utils/dsclient.asp?frame=true
|
| NIST
Identifier |
1102 |