This page provides an overview of basic security in Windows 2000, if you want a little more concrete analysis of the system's security configuration, and analysis of security do I run the mmc snap -.

True security update

Every time Microsoft releases from the hotfix, and sometimes ambiguous on the operating system's vulnerability. Important through the window and if they use the update feature. Suit, otherwise, can be used to make a small modification services. Paekhapnida suit. For more on solving problems found in the suit is important here.

Tcp - ip filtering

Specify the port to want to be through this approach. Suit. Ntfs file system and provides a very strong protection inwanted network connection to access the system through the suit. Right-configured to connect to the network, and then click Properties. On the General tab (for connecting local area), or manual network (all other connection), and click Internet Protocol (/), and then select Properties. Click Advanced. Click on the following options: tcp / ip filter, and then click Properties. Next, configure the suit. Tcp, udp you want to allow traffic to the port and ip. Note that this operation only filters incoming and outgoing traffic, a firewall is required to control traffic. Need to install a network suit. Folder, and select the option, a dial-up connection / optional components in the network.

Firewall

The firewall to monitor all incoming and outgoing data in a typical network with others in the system to prevent the attack. If there is a semi-permanent or a firewall is essential - Standing on the Internet, for example. During the attack on the openness of the system to verify that it reflects what - rain, a good travel sites look excellent. Windows 2000 for more information on this program can be used to locate in the suit.

Encryption

If you are using the file system ntfs files or folders to be encrypted so they suit different users. Sueopseup column. Explorer windows open ', and then move the files or folders to encrypt. The right mouse button to the file / folder and click "Properties" reulhapnida. The 'General' tab, and then click the 'Advanced'. Select "to ensure that data is encrypted 'box. Encrypt all the files and subfolders in this city is automatically encoded. Decryption transparent encryption of files or folders that person, and that person has limited I can work with the files without encryption to prevent other file or folder to open.



Windows file protection

For 2000, the windows to protect the basic programs that overwrite critical system files, file protection for the windows you here to find more information about the suit.

User Account

First, under the Control Panel / user and password to verify and "users must enter a user name and password" box is checked, and under the Advanced tab, "CTR is needed - alt - before users press delhagi Logon "is not confirmed.

To define user accounts to the system will provide access to an individual login. For more information on the control panel found. Suit, administrative tools, computer management, and local user groups and users. By default, the two user accounts to generate windows 2000: Administrator and Guest, sueopseup eliminate them, but it is better to change their names for security purposes. To simplify the process for the allocation of user accounts and promotion, the windows of 2000, the standard used to define the respective rights to a specific group. Suit them see that the control panel, administrative tools, computer management, and local user groups, group folders. Right click the user account, for example, can you see it in a group. Calculated by clicking the right mouse button, the user's account to the administrator, and registration information, refer to select members of this group, who is the administrator - this is Group is a full and unrestricted access to the system. Under the authority to set a more specific ntfs. User or group of folders or files suit to the same individual.

Account Manager is required to configure and install a log under windows 2000, but this is so, when finished, it is recommended to log on to the user's account. The simplest way is to change the customer's account: Right-click on Properties and to exclude any member of the group, then this is a name to the present, and a group of users. If you choose not to change the customer's account will be disabled and verify that the anonymous computer user's access to the account will be activated.

To create a new user account, Control Panel, Administrative Tools, Computer Management, a local group of users, and users, and the menu and select saeeseo measures. You have a new account for the user name and password you requested. Once your account is created to define property can click on the right mouse button to secure a new account is a member of the user group. By default, the account is set up, to change the password in the login, this is the most secure configuration, the box can be turned off and maintain a permanent, but the account's password.

There are three major groups created for the user:

Management: Manager's obligation to perform any and all compatible with the operating system. Suit. The administrator is not any legal standards, and they suit. This account is required for the following features:
Installing and operating system components (engines, including hardware, system services, etc.).

Service pack and install a hotfix

Installing Windows update teureul

Operating System Update

Recovery of the operating system

Big machines - the entire operating system as a parameter settings

User: Clean windows installed after 2000 - ntfs partition, the user's default security settings prohibit designed to undermine the integrity of the operating system and installed applications. Setting a user's machines - Wide sueopseup to modify the registry, files, the operating system or program files. Users install the application, users may not be able to run another suit. Other users access data on the user's personal sueopseup. They installed by the application to run. Suit administrators, power users, but other users or himself.

Power users: administrators and power users in terms of user access to the system, they will consider this:

Installation and removal of applications and services that do not install computer systems.

Custom systems, and resources (for example, weather systems, display settings, sharing, power configurations, printers, etc.).