【正文】 ..........................................................35 Configuration Checklist .................................................................................35 Relevant Group Policy Settings .....................................................................51 More Information .........................................................................................51 Identity Management for UNIX Role Service........................................................52 Server for Network Information Services ............................................................52 Attack Surface..............................................................................................52 Security Measures ........................................................................................53 Configuration Checklist .................................................................................53 Relevant Group Policy Settings .....................................................................54 More Information .........................................................................................54 Password Synchronization ..................................................................................54 Attack Surface..............................................................................................54 Security Measures ........................................................................................55 Configuration Checklist .................................................................................55 Relevant Group Policy Settings .....................................................................58 More Information ...............................................................................................58 Windows Server 2020 Security Guide iii Chapter 4: Hardening DHCP Services ................................................................. 61 Attack Surface....................................................................................................61 Security Measures ..............................................................................................62 Configuration Checklist .................................................................................62 Relevant Group Policy Settings .....................................................................66 More Information ...............................................................................................67 Chapter 5: Hardening DNS Services ................................................................... 69 Attack Surface....................................................................................................69 Security Measures ..............................................................................................70 Configuration Checklist .................................................................................70 Relevant Group Policy Settings .....................................................................74 More Information ...............................................................................................74 Chapter 6: Hardening Web Services ................................................................... 75 Secure By Default ..............................................................................................76 Attack Surface....................................................................................................78 Security Measures ..............................................................................................78 Configuration Checklist .................................................................................79 More Information ...............................................................................................89 Chapter 7: Hardening File Services .................................................................... 91 Attack Surface....................................................................................................93 Security Measures ..............................................................................................94 Configuration Checklist .................................................................................94 More Information ...............................................................................................97 Chapter 8: Hardening Print Services .................................................................. 99 Attack Surface..................................................................................................101 Security Measures ............................................................................................101 Configuration Checklist ...............................................................................101 More Information .......................................................................................108 Chapter 9: Hardening Active Directory Certificate Services ........................... 109 Certification Authority Role Service ...................................................................109 Attack Surface............................................................................................110 Security Measures ......................................................................................110 Configuration Checklist ...............................................................................110 Relevant Group Policy Settings ...................................................................116 iv Windows Server 2020 Security Guide More Information .......................................................................................116 Certification Authority Web Enrollment Role Service ..........................................116 Role Attack Surface ................................................................