Hi Experts, We do have dozens of IIS, TS and other windows member servers. All are windows server 2008-R2. This is the first time that we are planing server hardening process. We have one staging/parking environment which is almost same. Before we start this process I'm intrested to know more about pre-cautions and best tools that we can use. As per my understandings Microsoft Baseline Analyzer is meant for same process. Is there any best suggested tool from MS to acheive this task. Please link me to best practice document if possible, Regards Suman B. Singh

you can use Security Compliance Manager for the latest security setting and configuration recommendations from Microsoft. and below are some of the links, that i bookmarked for the reference : This should get you going in the right direction: Windows Server 2008 Security Guide : http://www.microsoft.com/downloads/d...displaylang=en Windows 2008/vista service hardening : http://blogs.microsoft.co.il/blogs/y...hardening.aspx and you can use sectools for getting some very useful tools (Vunerbilty& web-scanners)Gopi Kiran |Facebook| This posting is provided AS IS with no warranties,and confers no rights.

Similar questioned asked on this thread that is worth investigating: http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/25005cab-97ca-4e76-8157-a8447304ce49