Presentation is loading. Please wait.

Presentation is loading. Please wait.

OUHSC Information Security Update IT, Information Security Services Randy Moore Mike Waller Nathan Gibson Greg Bostic IT, Information Security Services.

Published byTrevor Poole Modified over 9 years ago

Similar presentations

Presentation on theme: "OUHSC Information Security Update IT, Information Security Services Randy Moore Mike Waller Nathan Gibson Greg Bostic IT, Information Security Services."— Presentation transcript:

1 OUHSC Information Security Update IT, Information Security Services Randy Moore Mike Waller Nathan Gibson Greg Bostic IT, Information Security Services Randy Moore Mike Waller Nathan Gibson Greg Bostic

2 Security Project Update (the three Ps) Policy baseline completed –See http://it.ouhsc.edu/policies/http://it.ouhsc.edu/policies/ Perimeter firewall management project complete –All externally accessible servers registered in db –Firewall rules updated with db –Servers scanned and vulnerabilities mitigated –https://www.ouhsc.edu/acl/admin23/allacl.cfmhttps://www.ouhsc.edu/acl/admin23/allacl.cfm Private IPs for hosts on new network Policy baseline completed –See http://it.ouhsc.edu/policies/http://it.ouhsc.edu/policies/ Perimeter firewall management project complete –All externally accessible servers registered in db –Firewall rules updated with db –Servers scanned and vulnerabilities mitigated –https://www.ouhsc.edu/acl/admin23/allacl.cfmhttps://www.ouhsc.edu/acl/admin23/allacl.cfm Private IPs for hosts on new network

3 Security Personnel Update Kenneth Reed: moved to Engineering Nathan Gibson: moving on risk assessments Mike Waller is moving on to Charlotte Greg Bostic is moving into security Kenneth Reed: moved to Engineering Nathan Gibson: moving on risk assessments Mike Waller is moving on to Charlotte Greg Bostic is moving into security

4 New Projects Payment Card Industry Data Security Standard Risk Assessments Security policy implementation Active Directory Baseline Security Configuration Payment Card Industry Data Security Standard Risk Assessments Security policy implementation Active Directory Baseline Security Configuration

5 OUHSC Group Policy Objects

6 Purpose Compliance Security Ease administrative overhead High level Polices Only Tier 1s can still apply organizational preferred settings User “buy-in” Compliance Security Ease administrative overhead High level Polices Only Tier 1s can still apply organizational preferred settings User “buy-in”

7 Time Line 4 Week Implementation Life Cycle –Week 1: IT will create and test the AD GP settings. –Week 2-4: Tier 1s will apply and test each GP to their respective AD Organizational Unit (OU) and present feedback to IT. For settings that present a change for their end-users Tier 1’s should communicate those changes in advance to their user community. IT will assist in developing appropriate communications. –Week 5: IT will evaluate any feedback given and make necessary modification before applying the settings at the campus wide level. 4 Week Implementation Life Cycle –Week 1: IT will create and test the AD GP settings. –Week 2-4: Tier 1s will apply and test each GP to their respective AD Organizational Unit (OU) and present feedback to IT. For settings that present a change for their end-users Tier 1’s should communicate those changes in advance to their user community. IT will assist in developing appropriate communications. –Week 5: IT will evaluate any feedback given and make necessary modification before applying the settings at the campus wide level.

8 Time Line(cont) 20 Settings –Will be separate into 4 separate groups containing at most 3 sets of related settings to limit impact. Example: 20 Settings –Will be separate into 4 separate groups containing at most 3 sets of related settings to limit impact. Example:

9 Time Line (cont) Group 1: Setting 1: - –Network access: Allow anonymous SID/Name translation – Disabled –Network access: Do not allow anonymous enumeration of SAM accounts – Enabled –Network access: Do not allow anonymous enumeration of SAM accounts and shares –Enabled –Network access: Let Everyone permissions apply to anonymous users –Disabled Setting 2 : –Add workstations to domain (Added Groups: OUHSC\Domain Admins, OUHSC\Computer- Account-Creators) Setting 3: –Turn on the auto-complete feature for user names and passwords on forms – DISABLED Group 1: Setting 1: - –Network access: Allow anonymous SID/Name translation – Disabled –Network access: Do not allow anonymous enumeration of SAM accounts – Enabled –Network access: Do not allow anonymous enumeration of SAM accounts and shares –Enabled –Network access: Let Everyone permissions apply to anonymous users –Disabled Setting 2 : –Add workstations to domain (Added Groups: OUHSC\Domain Admins, OUHSC\Computer- Account-Creators) Setting 3: –Turn on the auto-complete feature for user names and passwords on forms – DISABLED

10 IT Responsibilities Create GPOs and configure settings Assist Tier 1s in communicating GPO results to users Receive feedback from Tier 1s and assist in resolving problems Apply GPO settings at the Domain level after testing phase Create GPOs and configure settings Assist Tier 1s in communicating GPO results to users Receive feedback from Tier 1s and assist in resolving problems Apply GPO settings at the Domain level after testing phase

11 Tier 1 Responsibilities Advise Users Apply GPOs to Active Directory Organization Units Give feedback to IT-OPS and IT-ISS Advise Users Apply GPOs to Active Directory Organization Units Give feedback to IT-OPS and IT-ISS

12 GPO Review Group Policy Objects: 1.Allows you to configure baseline settings to ensure all resources have them same settings 2.Ease the administrative overhead in applying and modifying end user device and servers. 3.“One-Stop-Shop” for demonstrating policy compliance Group Policy Objects: 1.Allows you to configure baseline settings to ensure all resources have them same settings 2.Ease the administrative overhead in applying and modifying end user device and servers. 3.“One-Stop-Shop” for demonstrating policy compliance

13 GPO Review (cont) Applying Group Policy Objects 1.Use MS built in Group Policy Management Console (gpmc.msc) 1.Start > Run > gpmc.msc Applying Group Policy Objects 1.Use MS built in Group Policy Management Console (gpmc.msc) 1.Start > Run > gpmc.msc

14

15 GPO Review (cont) Applying Group Policy Objects 1. Use MS built in Group Policy Management Console (gpmc.msc) a. Start > Run > gpmc.msc 2. Apply GPOs to your Workstations OU. Applying Group Policy Objects 1. Use MS built in Group Policy Management Console (gpmc.msc) a. Start > Run > gpmc.msc 2. Apply GPOs to your Workstations OU.

16 GPO Review (cont) Applying Group Policy Objects 1. Use MS built in Group Policy Management Console (gpmc.msc) a. Start > Run > gpmc.msc 2. Apply GPOs to your Workstations OU 3. To apply the GPOs you right click on your OU and choose “Link an existing GPO” Applying Group Policy Objects 1. Use MS built in Group Policy Management Console (gpmc.msc) a. Start > Run > gpmc.msc 2. Apply GPOs to your Workstations OU 3. To apply the GPOs you right click on your OU and choose “Link an existing GPO”

17

18 GPO Review (cont) Applying Group Policy Objects 1. Use MS built in Group Policy Management Console (gpmc.msc) a. Start > Run > gpmc.msc 2. Apply GPOs to your Workstations OU 3. To apply the GPOs you right click on your OU and choose “Link an existing GPO” 4. All GPOs that are in this project will have a common naming convention Applying Group Policy Objects 1. Use MS built in Group Policy Management Console (gpmc.msc) a. Start > Run > gpmc.msc 2. Apply GPOs to your Workstations OU 3. To apply the GPOs you right click on your OU and choose “Link an existing GPO” 4. All GPOs that are in this project will have a common naming convention

19

20 GPO Review (cont) Applying Group Policy Objects 4. All GPOs that are in this project will have a common naming convention 5. Choose the GPO you would like to link and repeat the steps 2- 5 for each GPO you would like to apply there after. Applying Group Policy Objects 4. All GPOs that are in this project will have a common naming convention 5. Choose the GPO you would like to link and repeat the steps 2- 5 for each GPO you would like to apply there after.

21 House Cleaning Help Clean up Computers OU Standardize GPO naming scheme –HSC-Dept-XXXX –Delete Old GPOs –Combine GPOs If possible –Remove GPOs with settings applies at higher lever Clean up Computers OU Standardize GPO naming scheme –HSC-Dept-XXXX –Delete Old GPOs –Combine GPOs If possible –Remove GPOs with settings applies at higher lever

22 House Cleaning Help (cont)

23

24 Let’s Talk Questions & Concerns ???

Download ppt "OUHSC Information Security Update IT, Information Security Services Randy Moore Mike Waller Nathan Gibson Greg Bostic IT, Information Security Services."

Similar presentations

Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network.

Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network.
OUHSC Information Security Update IT, Information Security Services Randy Moore Nathan Gibson Greg Bostic IT, Information Security Services Randy Moore.

OUHSC Information Security Update IT, Information Security Services Randy Moore Nathan Gibson Greg Bostic IT, Information Security Services Randy Moore.
Khan Rashid Lesson 11-The Best Policy: Managing Computers and Users Through Group Policy.

Khan Rashid Lesson 11-The Best Policy: Managing Computers and Users Through Group Policy.
Managing User Settings with Group Policy

Managing User Settings with Group Policy
Windows 2003 SP1 Member Server in ASU Active Directory WNUG/CCC February 2, 2006 Sharon Bushart CLAS Information Technology.

Windows 2003 SP1 Member Server in ASU Active Directory WNUG/CCC February 2, 2006 Sharon Bushart CLAS Information Technology.
10.1 © 2004 Pearson Education, Inc. Exam 70-294 Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure.

10.1 © 2004 Pearson Education, Inc. Exam Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 9: Implementing and Using Group Policy.

70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 9: Implementing and Using Group Policy.
Administering Active Directory

Administering Active Directory
Hands-On Microsoft Windows Server 2003 Administration Chapter 3 Administering Active Directory.

Hands-On Microsoft Windows Server 2003 Administration Chapter 3 Administering Active Directory.
7.1 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 7: Introducing Group Accounts.

7.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 7: Introducing Group Accounts.
Performing Software Installation with Group Policy

Performing Software Installation with Group Policy
Guide to MCSE 70-290, Enhanced 1 Activity 9-1: Creating a Group Policy Object Using the MMC Objective: To create a GPO using the Group Policy Object Editor.

Guide to MCSE , Enhanced 1 Activity 9-1: Creating a Group Policy Object Using the MMC Objective: To create a GPO using the Group Policy Object Editor.
Auditing Logical Access in a Network Environment Presented By, Eric Booker and Mark Ren New York State Comptroller’s Office Network Security Unit.

Auditing Logical Access in a Network Environment Presented By, Eric Booker and Mark Ren New York State Comptroller’s Office Network Security Unit.
9.1 © 2004 Pearson Education, Inc. Exam 70-294 Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure.

9.1 © 2004 Pearson Education, Inc. Exam Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure.
Air Force Association (AFA) 1. 1.Access Control 2.Four Steps to Access 3.How Does it Work? 4.User and Guest Accounts 5.Administrator Accounts 6.Threat.

Air Force Association (AFA) 1. 1.Access Control 2.Four Steps to Access 3.How Does it Work? 4.User and Guest Accounts 5.Administrator Accounts 6.Threat.
Module 9 Configuring Server Security Compliance. Module Overview Securing a Windows Infrastructure Overview of EFS Configuring an Audit Policy Overview.

Module 9 Configuring Server Security Compliance. Module Overview Securing a Windows Infrastructure Overview of EFS Configuring an Audit Policy Overview.
Corso referenti S.I.R.A. – Modulo 2 07 – Group Policy 20/11 – 27/11 – 05/12 11/12 – 13/12 (gruppo 1) 12/12 – 15/12 (gruppo 2) Cristiano Gentili, Massimiliano.

Corso referenti S.I.R.A. – Modulo 2 07 – Group Policy 20/11 – 27/11 – 05/12 11/12 – 13/12 (gruppo 1) 12/12 – 15/12 (gruppo 2) Cristiano Gentili, Massimiliano.
Using Windows Firewall and Windows Defender

Using Windows Firewall and Windows Defender
11 SECURITY TEMPLATES AND PLANNING Chapter 7. Chapter 7: SECURITY TEMPLATES AND PLANNING2 OVERVIEW  Understand the uses of security templates  Explain.

11 SECURITY TEMPLATES AND PLANNING Chapter 7. Chapter 7: SECURITY TEMPLATES AND PLANNING2 OVERVIEW  Understand the uses of security templates  Explain.
Using Group Policy Lesson 4. Skills Matrix Technology SkillObjective Domain SkillDomain # Creating and Understanding Group Policy Modeling and Group Policy.

Using Group Policy Lesson 4. Skills Matrix Technology SkillObjective Domain SkillDomain # Creating and Understanding Group Policy Modeling and Group Policy.

Similar presentations

Ads by Google