Intergraph InterServe Web, Быстрый старт

Страница: 8 / 14

4
u
An account for testing system
configuration, such as
test :
u
An account for Web server
administration, such as
webmaster :
u
An account for Sendmail
administration, such as
pop3admin :
NOTE The administrator account for POP3 must be a member of the Administrators group.
Setting Up System Security
Intergraph Computer Systems recommends that you take the following steps to provide a reasonable
level of access security for your InterServe Web system. These measures provide an initial lockdown
of your InterServe Web system, and restrict system access to domain administrators and the primary
workstation user. These steps also enable basic security audit logging of all network events.
u
Check the security log regularly for evidence of any unauthorized activity.
u
Set the system’s boot sequence to C:A to prevent booting the system from diskette, and establish
a password for the system’s basic input/output system (BIOS). Refer to
System Setup for
information on configuring the system’s BIOS.
u
Ensure that the file system on each disk partition is set to NT File System (NTFS). If a File
Allocation Table (FAT) file system must be maintained, then only information of a public nature
should reside there.
NOTE All Intergraph Computer Systems servers are set to use NTFS before they are shipped.
Using User Manager, establish the following basic account policies:
u
Make sure only the Administrator and Sendmail administration accounts are members of the
Administrators group.
u
Establish a password for the Administrator user account.
u
Disable the Guest user account.
u
Set the User Rights policies so the Administrators group is the only Grantee for each User Right.
u
Set the Audit policies so the following Success and Failure events are audited:
−
Logon and Logoff
−
User and Group Management
−
Security Policy Changes
−
Restart, Shutdown, and System
u
Using Windows NT Explorer, make sure the Administrator user account takes ownership and full
control of all files and directories on each NTFS partition.
u
Using Windows NT Explorer, make sure all events of network users are audited.
For more information on using User Manager or Windows NT Explorer, refer to your Microsoft
operating system documentation and online Help.