20 June 2001: Thanks to A for pointing to source (www.iisanswers.com) for most recent NSA version of "Guide to the Secure Configuration and Administration of Microsoft Internet Information Services 5.0," dated June 19, 2001. (971KB)

19 June 2001: Thanks to SC for providing a workable version of "Group Policy Reference."

18 June 2001: Thanks to TH for providing missing files on "instructions" and "Guide to Securing Windows NT/9x Clients in a Windows 2000 Network."

17 June 2001. Mirror of the NSA Win2K download page, 13 June 2001
Source: http://www.nsa.gov/winsecurity/win2k/download.htm (temporarily inactive)

From the NSA Web site, June 17, 2001:

Notice about the availability of the Windows 2000 Security Recommendation Guides

Because of the amount of interest in the Windows 2000 Security Recommendation Guides, we are updating our Web site to better handle the demands placed on downloading the files. We expect to make the guides available once again during the week of June 18, 2001.

Zipped file of all files listed below: http://cryptome.org/nsa-w2k.zip  (7.8MB)

Links changed to access mirrored files at Cryptome.



Windows 2000 Security Recommendation Guides


Download Page

Release 1, June 2001


Windows 2000 ".inf" Files

The following files are the Security Configuration Templates for the Security Configuration Editor and are provided in ASCII Text format. IMPORTANT: Please read our Legal Notice before using these templates.

Note: Follow these instructions to ensure that Microsoft Exchange will work with the Windows 2000 Security Recommendation Guides.

  1. sceregvl.inf (10KB)

  2. W2K DC.inf (28KB)

  3. W2K Domain Policy Template.inf (2KB)

  4. W2K Server.inf (28KB)

  5. W2K Workstation.inf (27KB)


Security Recommendation Guides

The following files are provided in PDF format. IMPORTANT: Please read our Legal Notice before using these guides.

  1. Microsoft Windows 2000 Network Architecture Guide (161KB)

  2. Guide to Securing Microsoft Windows 2000 Group Policy: Security Configuration Tool Set (936KB)

  3. Guide to Securing Microsoft Windows 2000 Group Policy (237KB)

  4. Guide to Securing Microsoft Windows 2000 File and Disk Resources (234KB)

  5. Guide to Securing Microsoft Windows 2000 DNS (738KB)

  6. Guide to Securing Microsoft Windows 2000 Active Directory (430KB)

  7. Guide to the Secure Configuration and Administration of Microsoft Internet Information Services 5.0 (Version of June 19, 2001; 971KB) (Updated June 20, 2001)

  8. Guide to the Secure Configuration and Administration of Microsoft Windows 2000 Certificate Services (1,178KB)

  9. Guide to the Secure Configuration and Administration of Microsoft Windows 2000 Certificate Services (Checklist Format) (966KB)

  10. Guide to Securing Microsoft Windows 2000 Encrypting File System (199KB)

  11. Guide to Securing Microsoft Windows 2000 Schema (86KB)

  12. Microsoft Windows 2000 Router Configuration Guide (1,159KB)

  13. Guide to Windows 2000 Kerberos Settings (369KB)

  14. Group Policy Reference (789KB)

  15. Guide to Securing Windows NT/9x Clients in a Windows 2000 Network (143KB)

  16. Guide to Secure Configuration and Administration of Microsoft ISA Server 2000 (920KB)

  17. Guide to Using DoD PKI Certificates in Outlook 2000 (256KB)


Supporting Documents

The following files are provided in PDF format. IMPORTANT: Please read our Legal Notice before using these documents.

  1. Defense in Depth (78KB)

  2. Microsoft Office 97 Executable Content Security Risk and Countermeasures (284KB)

  3. Guide to the Secure Configuration and Administration of iPlanet Web Server, Enterprise Edition 4.1 (376KB)



Windows 2000 Security Recommendation Guides:
Home  Legal Notice



NSA Home

Revised June 12, 2001

 

Privacy & Security Notice


NATIONAL SECURITY AGENCY
FORT GEORGE G. MEADE, MARYLAND