Re: Benifits of ASP CMS Hosted

On Thu, May 13, 2004 at 03:42:26PM -0400, Adam Fields wrote:
> On Thu, May 13, 2004 at 03:40:30PM -0400, Paul D. Bain wrote:
> >         *NO*, you CANNOT secure an MS system. Your statement to the 
> > contrary reveals that you know nothing of computer security. Ask a security 
> > _expert_ (i.e., one does _not_hold an MCSE certification) whether it is 
> > possible to secure a MS operating system. At least 90 percent of them will 
> > say, "No."
> 
> Actually, you can. It just required unplugging it from the network.

Er, requires.

Sure, that was a flip answer, but the truth is that it >can< be done,
although there are a LOT of hoops to jump through, and I don't believe
that doing so is compatible with running, say, a webserver.

Here's the checklist for deploying WinNT in an Orange Book C2
environment:

http://www.microsoft.com/technet/security/chklist/c2config.mspx 

And the current status of this initiative:

http://www.microsoft.com/technet/security/news/c2eval.mspx

To the best of my knowledge, Win2K and WinXP never qualified for this.