All-round blocking of Windows 2003 security risks

Microsoft released the Chinese version of Windows Server 2003 a few days ago. The introduction of Windows Server 2003 in a short period of time can be seen as a next-generation server operating system that replaces the Windows 2000 Server family. It is tested in Windows 2000. Built on reliability, scalability, and manageability, it provides an efficient structural platform for enhancing the functionality of networked applications, networks, and XML Web services, from workgroups to data centers.
Windows Server 2003 is divided into 4 versions: Standard, Enterprise, Datacenter and Web. The minimum requirements for hardware systems are:
Minimum CPU speed 133MHz, recommended CPU speed 550MHz
Minimum memory requirements 128M, recommended minimum memory 256M
Installation required hard disk space 1.5GB
After a few days of use, have some understanding of Windows Server 2003, here are a few points to note:
Windows Server 2003 must It is necessary to have more than 128M memory modules to be installed. The motherboard with integrated graphics card like Intel 845GL can not be installed with only 128M memory. Windows Server 2003 cannot be installed. The installation program will be automatically interrupted.
Windows Server 2003 installation is basically the same as Windows 2000/XP. After the CD is booted, you can partition and format the hard disk, then select the installation path. The user only needs to input simple information, and the installation program is foolish.
Now the dedicated For Windows server 2003 driver is not available, we can use the For Windows2000/XP driver to install.
After installing, you need to change the settings of Windows Server 2003 before you can open IE and use DirectX. The specific method is as follows.
When shutting down and restarting Windows Server 2003, you must enter the reason and the system will shut down.
The following is a specific description:
Disable Manager Your Server dialog box
The first thing to do is to disable the Manager Your Server dialog box, if you don't want it to bother you every time you start the system. Just click to select the “Don’t display this page at logon” checkbox. You can also access it later via Control Panel -> Administrative Tools -> Manage Your Server.
Creating a new account There is no welcome screen in Windows Server 2003, so you will not be asked to set up a new account the first time you start it. Creating a new account is easy, click Start -> Run, then type lusrmgr.msc and press Enter. The Local Users and Groups window will appear, then right click on Users in the left panel and select New User, and fill in the relevant information according to the example in the figure (Full Name and Description are optional), then select the relevant Checkbox and click Create. It can also be added in the computer management of the control panel.
Set permissions Your new account is ready to use, but before we log in with it, you may want to give your account “Administrator” permissions. If you want to do this, right-click on the newly created account name and click Properties, open the Member of tab, click Add...-> Advanced -> Find Now, and then double-click Administrators at the top of the list. Click OK to close the window. Now you can log out of the Administrator and log in with the new account.
Disable IE's enhanced line security settings
The first time you open IE, you can't browse the webpage. The reason is that a new security feature of Windows Server 2003 is that IE security is set to high by default. So you can't browse any sites (unless you add the site to a secure site). You can use the following method to solve:
Run IE, you can see IE prompts that the Explorer Enhanced Security settings have been enabled, and also displays a dialog box, select "In the future, do not show" in the dialog box This message”.
Now, open Tools -> Internet Options, open the Security tab, and adjust the security of the Internet zone to Medium in “Security Level for this zone”. You will then see a dialog asking if you really want to change the security level, click Yes.
Usually set to Medium in the workstation, so this is also suitable for most people. OK, is there still a problem with the Internet?
Installing Sun's JAVA Virtual Machine
Windows Server 2003 does not include Microsoft's JAVA virtual machine, and Microsoft does not provide JAVA virtual machine downloads, although there are still many places to download to Microsoft's JAVA virtual machine. However, it is still not recommended to install, because: Microsoft's JAVA virtual machine has stopped upgrading, and if there are any new security vulnerabilities discovered in the future, there will be no patches.
Disable Shutdown Event Tracker
Because Windows Server 2003 is a "server", it is important to know why it should be shut down and restarted, so when manually restarting and shutting down, The system will ask for the reason. You can also disable this feature. You need to configure the Group Policy Object Editor, type gpedit.msc on the fly and press Enter. You should see the Group Policy Editor in the figure. Open Computer Configuration -> Administrative Templates -> System, then double-click Display Shutdown Event Tracker in the panel on the right. Then the window in the figure will appear, select Disable and click OK. Now close the Group Policy Object Editor window. You can see the traditional window when you shut down later.
Graphics Acceleration
To ensure optimal usability and maximum performance, hardware graphics acceleration and DirectX in Windows Server 2003 are disabled by default. If you need to use DirectX accelerated programs you can also open them as described below.
Enable Hardware Graphics Acceleration
Now we are ready to enable your hardware graphics acceleration. Right-click in the empty space on the desktop, click Properties -> Settings tab -> Advanced -> Troubleshoot tab, and drag the hardware graphics acceleration slider to Full. Click OK to exit. The screen may turn black for a few seconds.
Enable DirectX
Then prepare to enable DirectX graphics acceleration. Enter dxdiag on the fly and press Enter. You will see a dialog asking if you want to allow dxdiag to access the Internet to check for a valid WHQL certificate. Click Yes.
Open the Display tab and click on the three buttons to enable DirectDraw, Direct3D and AGP Texture Acceleration.
Audio Acceleration
Now that we have enabled graphics acceleration and DirectX acceleration, we also need to enable audio acceleration.
If you are using Windows Server 2003 Standard Edition, the Windows Audio service is already enabled by default, you can skip this step. Other versions of the user can continue to watch.
Enter Services.msc in the running and press Enter. The Services window will appear. Find the Windows
Audio service, double-click to open, set the startup type to Automatic, click Apply, and then click Start to start the service.
Finally, we also use the DirectX diagnostic tool, enter dxdiag on the run and press Enter, open the Sound tab, and drag the Hardware Sound Acceleration Level slider to Full. Ok, now the audio is all set up. Another point to note is that if it is SB Live! For sound cards, you should install LiveDrvUni-Pack for For Win2k/XP, which was released on March 10, 2003.
Set the theme Themes
Where is the theme? Below we will set the theme for use in Windows Server 2003.
First of all, we need to go back to the service settings dialog to enable the Themes service, enter Services.msc in the run and press Enter, find and double-click the Themes service, set the startup type to Automatic, click Apply and then click Start to open the service. Now you can use Luna Blue, Silver and Olive Green in Windows XP.
If you want to use more themes, you first need to crack your UXTheme.dll file.
Enabling other services to enable the operating system's built-in IMAPI CD burning service
If you want to use the operating system's built-in IMAPI CD burning service, you need to do the following: (but if you want to speed up the Nero Burring ROM startup) Speed ​​does not use this service.)
Enter Services.msc in the run and press Enter. Locate and double-click the IMAPI CD-Burning COM Service service, set the startup type to Automatic, click Apply, click Start and then click OK.
After restarting the system, you can see the option to burn a CD in the Send-To menu.
Enable Windows Image Acquisition (for cameras, scanners, etc.) If you have a camera, camera or scanner, do the following: Enter Services.msc and press Enter during the run, find and double-click Windows Image Acquisition (WIA) service, set the startup type to Automatic, click Apply, click Start and then click OK. You can then install the drivers for your camera and scanner.
Installing DirectX 9.0a
Installing DirectX 9.0a in Windows Server 2003 is the same as installing any version of DirectX in other Windows. If you have not enabled graphics acceleration and DirectX acceleration, please enable it before installation. they.
Folder Options
By default, all hidden files and folders are displayed, you can hide them so that there are not too many hidden files in the Explorer.
Open any folder, then select Do not show hidden files and folders under the Tools -> Folder Options -> View tab, then click OK.
Windows Media Player 9
Windows Media Player 9 is installed by default. Open Start -> Programs -> Accessories -> Entertainment -> Windows Media Player. Follow the prompts to select all the required checkboxes and you're ready to use.
You can also put Media Player 9 on the taskbar like this: Right click on the taskbar and select Windows Media Player under the Toolbars menu.
Available antivirus software
Symantec Norton Antivirus Corporate 8. x (Please note that the home version of 2002/2003 can not install Windows Server 2003 on)
available firewall
Zone Alarm 3.7.159
Norton Personal firewall 2003