Security Tightened in Windows Server 2003

Thanks to badnbusy in BPN ...

With the final release of Windows Server 2003 on the horizon, Microsoft has unveiled efforts it is taking to ensure the first Windows server release in over three years is secure. The announcement follows a memo sent to customers Thursday by Microsoft Chairman Bill Gates noting the progress Redmond has made in its Trustworthy Computing initiative. "As we increasingly rely on the Internet to communicate and conduct business, a secure computing platform has never been more important," Gates wrote.

Microsoft aims to ship Windows Server 2003 with added security right out of the box. Internet Information Services 6.0 will be turned off by default, and when enabled it will use a low-privilege user account to run applications. Remote users will no longer be able to log on to the system using a blank password, a feature security analysts have long criticized. Internet Explorer will include a new technology dubbed "IE Enhanced Security Configuration," which sets the default security setting to High and requires users to manually enter a list of trusted Web sites before navigating the Internet.

View: Full Story