Setting Up System Security - Intergraph InterServe Web Quick Start Manual

4
An account for testing system
u
configuration, such as test:
An account for Web server
u
administration, such as webmaster:
An account for Sendmail
u
administration, such as pop3admin:
NOTE The administrator account for POP3 must be a member of the Administrators group.

Setting Up System Security

Intergraph Computer Systems recommends that you take the following steps to provide a reasonable
level of access security for your InterServe Web system. These measures provide an initial lockdown
of your InterServe Web system, and restrict system access to domain administrators and the primary
workstation user. These steps also enable basic security audit logging of all network events.
Check the security log regularly for evidence of any unauthorized activity.
u
Set the system' s boot sequence to C:A to prevent booting the system from diskette, and establish
u
a password for the system' s basic input/output system (BIOS). Refer to System Setup for
information on configuring the system' s BIOS.
Ensure that the file system on each disk partition is set to NT File System (NTFS). If a File
u
Allocation Table (FAT) file system must be maintained, then only information of a public nature
should reside there.
NOTE All Intergraph Computer Systems servers are set to use NTFS before they are shipped.
Using User Manager, establish the following basic account policies:
Make sure only the Administrator and Sendmail administration accounts are members of the
u
Administrators group.
Establish a password for the Administrator user account.
u
Disable the Guest user account.
u
Set the User Rights policies so the Administrators group is the only Grantee for each User Right.
u
Set the Audit policies so the following Success and Failure events are audited:
u
Logon and Logoff
User and Group Management
Security Policy Changes
Restart, Shutdown, and System
Using Windows NT Explorer, make sure the Administrator user account takes ownership and full
u
control of all files and directories on each NTFS partition.
Using Windows NT Explorer, make sure all events of network users are audited.
u
For more information on using User Manager or Windows NT Explorer, refer to your Microsoft
operating system documentation and online Help.