【正文】 .................................................142 Configuration Checklist ...............................................................................142 Relevant Group Policy Settings ...................................................................145 More Information .......................................................................................145 HRA Role Service..............................................................................................145 Attack Surface............................................................................................146 Security Measures ......................................................................................146 Configuration Checklist ...............................................................................147 Relevant Group Policy Settings ...................................................................148 More Information .......................................................................................148 HCAP Role Service ............................................................................................149 Attack Surface............................................................................................149 Security Measures ......................................................................................150 Configuration Checklist ...............................................................................150 Relevant Group Policy Settings ...................................................................151 More Information .......................................................................................151 More Information .............................................................................................152 Chapter 11: Hardening Terminal Services ....................................................... 155 Attack Surface..................................................................................................156 Security Measures ............................................................................................157 Configuration Checklists ...................................................................................157 Securing Connections to the Terminal Servers ............................................157 Securing the TS Gateway ...........................................................................198 More Information .............................................................................................200 Index ................................................................................................................... 203 Overview Wele to the Windows Server 2020 Security Guide. This guide provides instructions and remendations to help strengthen the security of puters running Windows Server174。 whereas others run Windows XP with SP2 or later. For information about the baseline security settings that this environment uses, see Appendix A: Security Group Policy Settings. ?? Specialized Security – Limited Functionality (SSLF). Concern for security in this environment is so great that a significant loss of functionality and manageability is acceptable. For example, military and intelligence agency puters operate in this type of environment. The servers in this environment run only Windows Server 2020. For information about the SSLF settings that this environment uses, see Appendix A: Security Group Policy Settings. Caution The SSLF security settings are not intended for the majority of enterprise anizations. The configuration for these settings has been developed for anizations where security is more important than functionality. The anization of the guide enables you to easily access the information that you require. The guide and its associated tools help you to: ?? Establish and deploy either of the security prescribed baselines in your work environment. ?? Identify and use Windows Server 2020 security features for mon security scenarios. ?? Identify the purpose of each individual setting in either security baseline and understand their significance. You will need to download the GPOAccelerator for the Windows Server 2020 Security Guide and the howto guidance for this tool to create, test, and deploy the security settings for either the EC environment or the SSLF environment. This tool automatically creates all the GPOs for the security settings this guide remends. For instructions 錯(cuò)誤 !使用“開始”選項(xiàng)卡將 Heading 1,h1 應(yīng)用于要在此處顯示的文字。 Windows Server174。s business. Every day, adversaries are attempting to invade your works and access your servers to bring them down, infect them with viruses, or steal information about your customers or employees. Attacks e from all directions: from onsite employee visits to Web sites infected with malware, to offsite employee connections through virtual private works (VPNs), branch office work connections to corporate servers, or direct assaults on vulnerable puters or servers in your 2 Windows Server 2020 Security Guide work. Organizations of all sizes now also face more plex and demanding audit requirements. You know firsthand how essential your servers are to keeping your anization up and running. The data they house and the services they provide are your anization’s lifeblood. It is your job to stand guard over these essential assets, prevent them from going down or falling victim to attacks from outside and inside your anization, and to prove to auditors that you have taken all reasonable steps to secure your servers. Windows Server 2020 is engineered from the ground up with security in mind, delivering an array of new and improved security technologies and features that provide a solid foundation for running and building your business. The Windows Server 2020 Security Guide is designed to further enhance the