This tool is a set of scripts that user and Technical Liaisons can use to setup more secure Windows 2000 and Windows XP PCs.

This tool, or better set of tools, was developed by the IT Security Office in conjunction with the KU Field Security Officers. The goal of the project was to allow systems administrators to download a tool that would allow them to more easily harden computers that run the Windows 2000 or Windows XP operating systems.

This tool will configure your computer to meet the IT Security Offices best practices for a windows workstation.

This tool hardens the four critical components of a properly configured Windows PC. These include:

• Password complexity and password rotation are turned on to meet the requirements of the KU password policy.
• Logging and Auditing are turned on and properly configured
• Services are hardened by removing many unused, unnecessary, or insecure services.
• Patch Installation by pointing the computers Autoupdate component to the central campus SUS server and configuring it to run daily

This tool is for Windows 2000 and Windows XP only. It includes documentation for the tool.

• Tool Documentation
  • This document provides information on how to use the tool and what it does.
• Windows 2000 Service Template
  • This document provides information on what services are turned off and what they do on the Windows 2000 Platform
• Windows XP Pro Service Template
  • This document provides information on what services are turned off and what they do on the Windows XP Platform

Example:
secedit /configure /db password.sdb /cfg password.inf /overwrite /log password.log

Example:
regedit /S .\data\windowsupdate.reg

For questions or assistance with this process please contact the IT Security Office:

• Email: itsec@ku.edu
• Phone: 785-864-9003