IT Baseline Protection Manual - The Information Warfare Site

Networked Systems Windows NT Network
_________________________________________________________________________________________
6.4 Windows NT network
Description
This chapter concerns a Windows NT network functioning as
a client-server system under the Windows NT operating
system (version 3.51 or 4.0). The security aspects of a
Windows NT server are dealt with.
The client-specific safeguards are covered in chapter 5. There
are only marginal references to aspects of Windows NT
applications specific to security, for example in relation to
Mail, Schedule+, Direct-Data-Exchange (DDE) or Remote Access Service (RAS). In addition to the
dangers and protection safeguards detailed here, the safeguards specified in Section 6.1 for a general
server-supported network still apply. If the Peer-to-Peer functionality of Windows NT is used in the
Windows NT network, the contents of Section 6.3 should also be taken into account.
Threat Scenario
The following typical threats are assumed for IT baseline protection of a server-supported network
under the Windows NT operating system:
Organisational shortcomings:
- T 2.23 Security flaws involved in integrating DOS PCs into a server-based network
- T 2.25 Reduction of transmission or execution speed caused by Peer-to-Peer functions
- T 2.30 Inadequate domain planning
- T 2.31 Inadequate protection of the Windows NT system
Technical Failure:
- T 4.10 Complexity of access possibilities to networked IT systems
- T 4.23 Automatic CD-ROM-recognition
Deliberate Acts:
- T 5.23 Computer viruses
- T 5.40 Monitoring rooms using computers equipped with microphones
- T 5.43 Macro viruses
- T 5.52 Misuse of administrator rights in Windows NT systems
- T 5.79 Unauthorised acquisition of administrator rights under Windows NT
Recommended Countermeasures (S)
For the implementation of IT baseline protection, selection of the required packages of safeguards
("modules") as described in chapters 2.3 and 2.4, is recommended.
When processing the specific Windows NT safeguards, a safety strategy should first be drawn up
using safeguard S 2.91 Determining a security strategy for the Windows NT client-server network. In
_________________________________________________________________________________________
IT-Baseline Protection Manual: Otober 2000
Windows
NT
Netz