Windows 2000 - User Security

• Activate security auditing to log unsuccessful logon attempts

  Audit policies can be created to record unsuccessful logon attempts in the event log.

• Allow users to shutdown the machine without login

  Extend the login dialog with the option to shutdown the computer without having given credentials.

• Configure Automatic Logon in Windows NT

  Enabling automatic login so one doesn't have to type username and password at every boot.

• Disable the MSDOS and Win16 subsystem

  For security measures then one should consider disabling the ability to launch the 16 bit subsystem.

• Moving the userprofile to a different location

  How to move the location of the user profile for either backup or after restore.

• Restrict access for NULL sessions

  How to prevent access for anonymous to see available shares and user accounts.

• Restrict access to the OS/2 and POSIX subsystem

  Disable legacy subsystems to prevent attackers from using these subsystems as base of attack.

• Restrict access to the USB storage devices

  USB makes it easy to attach a storage device and steal valuable data from a computer.

• Restrict access to the files stored on NTFS partitions

  Using access control lists to improve the security for NTFS partitions.

• Restrict access to the registry over the network

  Manage what accounts that have remote access to the registry.

• Restrict guest access to event logs

  The system event log can contain information, which can be used compromise the security.

• Restrict users from replacing a system DLL

  Protect against DLL injections to avoid performing malicous code.

• Securing the local Administrator account

  Protecting the Administrator account from unauthorized access.

• Using NULL sessions to view shares and user accounts

  Example of how to list shares and user accounts with anonymous access.