Aside from running MBSA (Microsoft Security Baseline Analyzer) and File Services BPA what other tools or checks would/should you run when doing an audit of a new file server design (will be joined to a domain).
Microsoft Server OSActive Directory
Last Comment
Sushil Sonawane
8/22/2022 - Mon
Suliman Abu Kharroub
AD Audit is one of the best auditing tools for AD and file servers"
no I am not after tools to verify changes made to a system , an audit is essentially a healthcheck. It can be looking at password policies, account lockout policies, configuration settings.
Pau Lo
ASKER
Along the lines of Microsoft Best pRactices ANalyser"
"In Windows management, best practices are guidelines that are considered the ideal way, under normal circumstances, to configure a server as defined by experts. For example, it is considered a best practice for most server technologies to keep open only those ports required for the technologies to communicate with other networked computers, and block unused ports. While best practice violations, even critical ones, are not necessarily problematic, they indicate server configurations that can result in poor performance, poor reliability, unexpected conflicts, increased security risks, or other potential problems."
http://www.manageengine.com/products/active-directory-audit/