>>Security Configuration Guides

Microsoft Windows 2000 Guides

Windows 2000 is NOT RECOMMENDED for security-critical environments. It lacks important security features which are available in Windows XP and Vista. Microsoft currently provides security patches for Windows 2000, but the product is in its Extended Support Period, and this will end in June 2010. NSA recommends upgrading as soon as possible.

To assist our Windows 2000 user community, NSA has developed security configuration guidance for Windows 2000, with the cooperation of other government agencies and industry partners who provided their expertise and extensive technical review. The configuration guide for Microsoft Windows 2000 is being posted on the NSA web site and is presented in three parts: ".INF" files, configuration guides, and supporting documents..

NOTE: Follow these instructions to ensure that Microsoft Exchange will work with the Windows 2000 Security Configuration Guide.

A description of the files and how to modify the settings is available in the Guide to Securing Microsoft Windows 2000 Group Policy: Security Configuration Tool Set*.

Title	File Size	Updated
SCERegVl.INF	13KB	5 Mar 03
W2kDC.INF	32KB	5 Mar 03
W2K DOMAIN POLICY.INF	4KB
W2k Server.INF	32KB	5 Mar 03
W2k Workstation.INF	31KB	5 Mar 03
ISA.INF	1KB
Microsoft Windows 2000 Network Architecture Guide*	227KB
Guide to Securing Microsoft Windows 2000 Group Policy*	328KB
Guide to Securing Microsoft Windows 2000 Group Policy: Security Configuration Tool Set 1.2.2*	755KB	12 Sep 06
Group Policy Reference*	769KB
Guide to Securing Microsoft Windows 2000 Active Directory*	611KB
Guide to Securing Microsoft Windows 2000 DNS*	372KB
Guide to Securing Microsoft Windows 2000 Encrypting File System*	218KB
Guide to Securing Microsoft Windows 2000 File and Disk Resources*	420KB
Guide to Securing Microsoft Windows 2000 Schema*	133KB
Guide to Securing Microsoft Windows NT/9x Clients in a Windows 2000 Network*	231KB
Guide to Secure Configuration and Administration of Microsoft ISA Server 2000*	1,469KB
Guide to Secure Configuration and Administration of Microsoft Windows 2000 Certificate Services*	1,432KB
Guide to Secure Configuration and Administration of Microsoft Windows 2000 Certificate Services (Checklist Format)*	1,167KB
Guide to Secure Configuration and Administration of Microsoft Internet Information Services 5.0 version 1.4*	2,731KB	16 JAN 04
Guide to Using DoD PKI Certificates in Outlook 2000, version 2.0*	800KB
Guide to Windows 2000 Kerberos Settings*	369KB
Microsoft Windows 2000 Router Configuration Guide*	688KB
Guide to Securing Microsoft Windows 2000 DHCP*	337KB
Guide to Securing Microsoft Windows 2000 Terminal Services*	662KB
Microsoft Windows 2000 IPsec Guide*	1,330KB
Guide to Secure Configuration and Administration of Microsoft Exchange 2000*	4,200KB	15 Dec 04
Zipped Windows 2000 Security Configuration Guides**	16,300KB	28 Oct 05

* To view documents stored as Portable Document Format (PDF) files your local computer must have the Adobe Acrobat Reader 5.0, or later, application or a Web browser plug-in that supports the PDF file format.

**To download and uncompress zipped files you need to have winzip loaded on your local machine.