Use the following checklists to ensure that you have properly implemented all security settings and procedures prescribed in Chapter 5.
Creating the Active Directory Infrastructure Servers OU:
Step Notes: q Create the Infrastructure Servers OU.
q Create the Incremental Infrastructure Server Policy GPO.
q Link the GPO to the Infrastructure Servers OU.
q Import the security template for the corresponding client environment into the newly created GPO. For example, the Enterprise Client Infrastructure Server.inf.
Infrastructure Server Hardening Steps:
Step Notes: q Install and configure Windows Server 2003. Format ALL drives using NTFS. q Install and configure infrastructure services as required.
q Apply any required service packs and/or updates.
q Install and configure a virus protection solution.
q Install and configure MOM agents or similar monitoring solution as required.
q Move appropriate server to the corresponding Infrastructure Servers OU.
q Secure well-known accounts. Rename the built-in Administrator account, assign a complex password. Ensure Guest account is disabled. Change default account description. q Secure service accounts.
q Consider implementing IPSec filters.
q Verify the Incremental Infrastructure Server Policy has replicated between domain controllers.