View Review Details


Book:   Securing Windows Server 2003
Subject:   An excellent security book for all
Date:   2005-02-18 06:07:32
From:   Anonymous Reader
Rating:  StarStarStarStarStar

The book is very thorough. Mike Danseglio really knows his stuff and he knows how to impart it in a practical and comprehensible way. If you are responsible for a Windows 2003 server then everything you really need to know and implement on a day to day basis is in here. He takes you from a simple description of what security really is and means, to the unspoken and over looked security problems and solutions of DHCP, DNS and IIS and much, much more. This book covers the total nature of creating an environment which maintains an acceptable level of security. It doesn't kid you that you can make any system 100% secure, but it gives you the peace of mind that comes from knowing exactly what your exposure is at the end of your security policy implementation. It takes each physical and programatical security issue of a Windows 2003 environment (though most of the advise could be applied to any computing environment), points out the security loop holes and tells you what your options are for plugging them, from newer ideas like smart cards to good practices, securing your network protocols and using encryption.


Some of the book explores the varying options for security implementation on any given security issue, bringing you to the understanding that there is no one right answer and that making a system usable is directly contrary to making it secure, so you have to strike the right balance and be proactive as well as reactive.


Conclusion:

Read it cover to cover, go through it systematically to secure your entire server or use it as a reference for specific items you want to secure. You won't be sorry you bought this book. If you only buy one Security book this year, make it this one.