Windows Security, Auditing, & Compliance
Windows Security, Auditing, & Compliance will contain sessions and topics that help and guide administrators secure their Windows environment. Security entails configuration, validation, and assurance that the security remains intact. These sessions will help ensure that security can be obtained and maintained to meet even strict compliance and auditing guidelines.
Monday, September 8
TM4Configuring the Top 10 Windows and Active Directory Security Settings
Derek Melber
Monday, September 8, 10:30 a.m.
This might come as a shock, but did you know that by default neither Microsoft Servers nor Active Directory is completely secured? This session will give you the top 10 security settings that you absolutely must know about, consider, and implement! This session will not go into obscure security settings that you probably don’t care about. Rather, we’ll discuss the specific configurations that every network must set up. Come to this session to protect yourself and your Active Directory from potential hacks!
Tuesday, September 9
TT1Tips & Tricks for Fearlessly Using the Windows XP & Vista Firewall
Greg Shields
Tuesday, September 9, 9:00 a.m.
When Microsoft released the Windows Firewall in XP Service Pack 2, what did you do with it? Turn it off? Admittedly, that first attempt at forcing a firewall down our throats wasn’t the greatest, but the Windows Firewall has gotten a lot better over the years. Fear no more! Learn about how to manage it locally and with Group Policy, easily protecting your laptops when off the domain while not causing problems while on the domain. If you wish you had the Windows Firewall’s added security without the added hassle, you won’t want to miss this key session. When it comes to the Windows Firewall, you can turn it back on now.
TT9*Real World Issues Configuring and Auditing Windows Security - INTERACTIVE
Derek Melber
Tuesday, September 9, 12:45 p.m.
ave you ever heard the question “Is our Windows network secure?” or “The security auditor will be coming in tomorrow morning, are you ready?” If these questions make you a bit queasy, come and get them answered in this INTERACTIVE session with Derek Melber, author of Auditing Windows Security. This will be a highly-interactive group discussion, where Derek will expose some key security areas, then open up the floor to your questions and comments about best practices in configuring and auditing these security settings.
TT10 Tips & Tricks for Hardening Vista & Server 2008 Systems
Mark Minasi
Tuesday, September 9, 2:15 p.m.
Server 2008 and Vista share the same basic foundation, which centers around a complete re-write of the Windows kernel. That rewrite came from a new Microsoft determined not to repeat the embarrassments of Code Red, Nimda, SQL Slammer, MS Blaster and the rest of our nasty friends. Both Microsoft’s desktop and server OSes now tout more secure bases – but are they? In this talk, security consultant and writer of Administering Windows Vista Security: The Big Surprises offers a quick and independent overview of Windows’ new security tools. Come to this talk for the straight dope, and a few chuckles.
Wednesday, September 10
TW1
Understanding What Industry & Regulatory Compliance Means to Windows
Don Jones
Wednesday, September 10, 9:00 a.m.
HIPPA, SOX, GLB, PCI DSS – they’re not just illegal words in Scrabble, they’re acronyms for a handful of the most common forms of industry and regulatory compliance. But what do these long-winded and arcane sets of rules and regulations mean to you as a Windows administrator or systems architect? Don Jones, author of numerous publications on compliance and technology, reveals the connection between these important sets of rules and what you’re doing with Windows, SQL Server, Exchange Server, Active Directory, and more. You’ll find out exactly what you need to do to be compliance, and get a very brief rundown of free and commercial tools that can help you make the grade.
TW12 What You Absolutely Must Know to Successfully Implement a Windows Certificate Authority
James Conrad
Wednesday, September 10, 2:15 p.m.
Certificates are one of the most secure and effective ways to secure data and confirm identity. They’re useful for everything from authenticating systems, to encrypting data, to validating clients, to proving who your users and computers really are. In this session, you’ll learn how to deploy a Certificate Authority in your organization and the tips and tricks to safeguard it over the long-haul. Plus, you’ll find out easy and effective ways to deploy certificates to your users and computers.
*Introducing TechMentor’s new INTERACTIVE sessions
After hearing the lecture and working through the new Hands-On Labs, where do you go if you still have questions? With TechMentor we’ve heard your requests and designed a few new special sessions we call INTERACTIVE. More than just group discussion, TechMentor’s INTERACTIVE sessions focus on a topic-specific, two-way conversation between attendees and instructor. You’ll get the opportunity to ask questions you need to know while learning from your fellow attendee. These special INTERACTIVE sessions are unique to TechMentor and something you won’t want to miss. Come to TechMentor, learn about new and existing technologies, get your hands on them, and your questions answered.
