q000027

How do I configure WinNT for running Sentry?

This article applies to: BlackICE Sentry.

SUMMARY

For maximum security, you should strip out as much as you can.

DETAILS

Install WinNT (of course)

Install the OS, all hardware, and drivers.

Upgrade to the latest service pack, 128-bit

Rename the accounts "Administrator" and "Guest", disable "Guest"

This step isn't strictly necessary, but is recommended.

Remove all Network Services

Go to the "Network" control panel, the "Services" tab, and remove ALL the services you see there. Reboot.

Disable many normal services

Control Panel, "Services" panel. Most all the services can be disabled. Typical ones that you need to leave running are: "Event Log", "Plug and Play", "Protected Storage".

Disable WINS client

Control panel, "Devices" panel.

Disable remote registry access

See: http://www.enteract.com/~lspitz/nt.html

 
Keywords: hardening Windows NT 
Version:   
Fixed:     
Modified: 1999-09-11