NSA's Win 2000 Security Guidelines - Available for downloading
The NSA placed their Win 2000 Security Guidelines online and due to the demand (?) they twice as quickly took their guidebook offline claiming that their 'server couldn't handle the number of downloads'
Cryptome and SecurityNewsPortal have risen to the challenge and have both put the Win2000 security guideline manual online for your downloading pleasure. You can download this version and compare it against the 2nd version that NSA will put online next month and see if we were right about the recent rash of MS bugs being the real reason for why they took it offline ( to re-write it )continued...
The download is approximately 8 megs in size
Cryptome.org has a copy of the Guidelines if anyone is interested at :
Download from the Cryptome.org Server
SecurityNewsPortal has a copy of the Guidelines if the other server is too busy at
Download from the SecurityNewsPortal.com Server
Here is the news story we previously published about this disappearing set of security guidelines and what it contains.
NSA Releases Win2K Security Recommendation Guidelines - well they did for a short while....
The US National Security Agency (NSA) has released a set of guidelines and templates to assist in securing Windows 2000 systems. The materials contain 5 templates to use with Microsoft's Security Configuration Editor, 17 guides to secure various aspects of the OS, and 3 supporting documents with indepth defense coverage and particulars about various popular software packages.
The templates include configuration settings for domain controllers (DCs), domain policy, and server and workstation settings. The guides are available in Adobe Portable Document Format (PDF) and cover a broad range of topics, including network architecture, Group Policy, file and disk resources, Encrypting File System (EFS), DNS, Active Directory (AD), Microsoft IIS, Kerberos, public key infrastructure (PKI), Windows NT and 9x clients, Outlook, and routers
According to NSA, it derived some of the material from Microsoft copyrighted material (with the company's permission). NSA urges users to test the settings before applying them to a production environment. In addition, users should read the legal notices at the NSA Web site before downloading and using any of the materials.
Regarding the security of other OSs, the NSA announced in January 2001 that it had begun developing a more secure version of Linux that it calls Security-Enhanced Linux. NSA has made the prototype and source code available to the public at the NSA/CSS INFOSEC Web site.
The link to the NSA's server where the file SHOULD be when they put it online is :
