Re: hardening sql server 2000

Yes...follow the guide and then apply SP4. SP3 is referenced
in a lot of SQL Server 2000 documentation as it had a lot of
security changes and some functionality changes related to
security.
You can find some more security links, checklists, etc at:
http://www.microsoft.com/technet/prodtechnol/sql/2000/maintain/sp3sec00.mspx

-Sue

On Fri, 28 Jul 2006 18:02:07 +0100, Craig
<spam@xxxxxxxxxxxxx> wrote:

Hello,

I've just looked over
http://www.windowsecurity.com/articles/Secure-Installation-Microsoft-SQL-Server-2000.html

which seems to be a pretty good document. The problem is it references SP3.


Should I follow this guide, and then install SP4?

Will SP4 blow away any sound modifications made in the previous steps?

Can someone point me at other documents that they found useful when
trying to install SQL 2000 in the most secure way possible.?

Thanks in advance,
CH

.

Relevant Pages

  • Re: Security vs. Simplicity
    ... We can cover most of the vulnerabilities, ... Read a security documentation on section maintenance; ... argument about complexity impacting security. ...
    (Security-Basics)
  • Re: Hacked via Microsoft Servers!
    ... There is no way to script the policy settings in local of group ... Security Templates, ... Microsoft MVP ... > documentation that was not accurate from elsewhere I attempted to find ...
    (microsoft.public.windows.group_policy)
  • Re: How much do you disclose to customers?
    ... an admin came in and informed him that the "scanning the security guys were ... Our "CYA" was the manager in that case. ... We had detailed documentation and logs of our activities proving ...
    (Pen-Test)
  • Re: Privilege-escalation attacks on NT-based Windows are unfixable
    ... >>>From the Orange Book documentation on C2 security ... >> work as claimed in the system documentation. ... >>developer made a call in his program that turned all privileges off. ... incoming windows messages. ...
    (comp.security.misc)
  • Re: Privilege-escalation attacks on NT-based Windows are unfixable
    ... >>>From the Orange Book documentation on C2 security ... >> work as claimed in the system documentation. ... >>developer made a call in his program that turned all privileges off. ... incoming windows messages. ...
    (comp.os.ms-windows.nt.admin.security)