CIS 244 - Securing Windows Server

3 Credits, 4 Contact Hours
2 lecture periods 2 lab periods

Identify security issues through use of auditing and the Advanced Threat Analysis feature in Windows Server. Includes mitigation of malware threats, securing the virtualization platform, and use of deployment options such as Nano server and containers to enhance security. Also includes protecting access to files by using encryption and dynamic access control to enhance security.

Prerequisite(s): CIS 221
Gen-Ed: Meets AGEC Options requirement; Meets CTE - Options requirement

Course Learning Outcomes

Create multiple levels of Windows server hardening.
Explain functional and technical impacts of using Windows server security baselines.
Analyze levels of authentication and threat protection.

Outline:

Server Hardening
1. Disk and file encryption
2. Server patching and updating
3. Malware protection
4. Credential protection
5. Microsoft security compliance toolkit
Virtualization
1. Host guardian service
2. Key protection services
3. Shielded VMs
4. Encrypted VMs
Network Infrastructure
1. Windows firewall
2. Datacenter firewall
3. IPSEC
4. DNSSEC
Privileged Access Control
1. Microsoft identity manager
2. Just-Enough-Administration
3. Privileged Access Workstations (PAWS)
4. Local Administrator Password Solution (LAPS)
Threat Detection
1. Audit policies
2. Microsoft advanced threat analytics
3. Operations Management Suite (OMS)
Workload Specific Security
1. Dynamic access control
2. File server resource manager
3. File classification infrastructure

Effective Term:
Fall 2023