Pau Lo
asked on
Windows File Server audit
Aside from running MBSA (Microsoft Security Baseline Analyzer) and File Services BPA what other tools or checks would/should you run when doing an audit of a new file server design (will be joined to a domain).
ASKER
I am not looking for an audit "who did what in AD" tool, more a configuration best practices type review.
Please refer below link this might be help you
http://www.quest.com/changeauditor-for-windows-file-servers/
http://www.quest.com/changeauditor-for-windows-file-servers/
ASKER
no I am not after tools to verify changes made to a system , an audit is essentially a healthcheck. It can be looking at password policies, account lockout policies, configuration settings.
ASKER
Along the lines of Microsoft Best pRactices ANalyser"
"In Windows management, best practices are guidelines that are considered the ideal way, under normal circumstances, to configure a server as defined by experts. For example, it is considered a best practice for most server technologies to keep open only those ports required for the technologies to communicate with other networked computers, and block unused ports. While best practice violations, even critical ones, are not necessarily problematic, they indicate server configurations that can result in poor performance, poor reliability, unexpected conflicts, increased security risks, or other potential problems."
"In Windows management, best practices are guidelines that are considered the ideal way, under normal circumstances, to configure a server as defined by experts. For example, it is considered a best practice for most server technologies to keep open only those ports required for the technologies to communicate with other networked computers, and block unused ports. While best practice violations, even critical ones, are not necessarily problematic, they indicate server configurations that can result in poor performance, poor reliability, unexpected conflicts, increased security risks, or other potential problems."
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
http://www.manageengine.com/products/active-directory-audit/