Security Tips and Tricks in Windows Server 2008 – Scroll down or click to read it online

Add newsletter@trainsignal.com to your address book or safe senders list to ensure our newsletters arrive in your inbox.

Train Signal Inc. Visit Us Online
Call Us: 888-229-5055
Biweekly Newsletter

Security Tips and Tricks - May 8, 2008


 • Securing FTP 7.0 with SSL and User Isolation
 • To RODC or Not To RODC, That Is the Question
 • How to Make Your Network Secure Using Secure Shell Protocol

Securing FTP 7.0 with SSL and User Isolation

If you have been following our FTP 7.0 chronicles in the first article we Installed FTP Publishing Service for IIS 7.0 and configured it for anonymous access. For those with less public needs, the next article covered Setting up FTP 7.0 User Authentication using both Windows authentication and IIS User Manager.

In this article we will cover adding additional layers of security to your FTP sessions.

Most administrators only worry about keeping data secure once it is on one of their servers. As the bad guys get more sophisticated every day, the need to keep data secure during transmission is no longer only for the realm of e-commerce sites.

By using SSL you can secure your FTP transmission from point to point to guard against interception of the data. There are several things that need to be done before we get to that point so let’s get started.


Need more security? Read about Securing FTP 7.0 with SSL and User Isolation

Get Exchange Server 2007 Training -- Your Guide to a Secure Messaging Solution

To RODC or Not To RODC, That Is the Question

Security is a mission that never ends.

The hackers don’t sit around eating cold pizza and wearing their thumbs out on Xbox moaning about how they can’t use the buffer overflow trick to gain access to secure systems anymore.

Instead, they sit around eating cold pizza and wearing their thumbs out on Xbox while wondering what would happen if they could somehow parse a command string with a hex editor when the command is actually expecting ASCII text … Or at least that’s what it looks like on YouTube.

The newly implemented Read-Only Domain Controller (RODC) in Windows Server 2008 provides a way to increase the security of servers whose physical security cannot be assured.

In addition, it can provide a way for local administrator privileges to be assigned to a user that you need to be an administrator at the local level, but who you do not want to allow a backstage pass into the domain-wide AD database via replication.

However, because the RODC intentionally limits its participation in the enterprise-wide AD structure, it is wise to limit its use to only those times when the additional level of security is required.


Is RODC right for you? Find out here: To RODC or Not To RODC, That Is the Question

Learn About Network Security with our Best Selling Cisco CCNA Training

How to Make Your Network Secure Using Secure Shell Protocol

Nowadays, security is more important than ever. It’s extremely important that user accounts, passwords and hosts are protected from malicious attacks.

Secure Shell Protocol (SSH) is capable of establishing secure encrypted tunnels for carrying data. SSH protocol can be used for remote access to your network devices, for securely transferring files between hosts and even for forwarding application data between workstations.

Various terminal emulators exist that support SSH. Based on my personal experience, SecureCRT and PuTTY are two of the best SSH emulators.

And since PuTTY can be downloaded for free, today I am focusing on how to use PuTTY for establishing SSH remote connections and encrypted data tunnels.

I'll show you the necessary steps for configuring and taking advantage of SSH on PuTTY. I also included lots of screenshots to help you along, so let’s get started with configuring PuTTY.


Find out How to Make Your Network Secure Using Secure Shell Protocol

Visit Train Signal and Train Signal Training for all your IT training needs.
© 2008 Train Signal, Inc. All Rights Reserved.
1855 Hicks Road, Rolling Meadows, Illinois 60008, http://www.trainsignal.com
contact us  privacy policy