Standard Security Practices for Windows NT

• Microsoft Windows NT operating system version 3.1
• Microsoft Windows NT Advanced Server version 3.1
• Microsoft Windows NT Workstation versions 3.5, 3.51, and 4.0
• Microsoft Windows NT Server versions 3.5, 3.51, and 4.0

SUMMARY

Any security breach that requires access to administrative privileges needs to be dealt with using the appropriate security policy. This applies to all commercial operating systems, including Windows NT and UNIX.

MORE INFORMATION

Security is achieved through a combination of technology and policy. In order to maintain a highly secure environment, standard security practices should be followed, including:

• Only trusted individuals should be granted Administrator privileges on the system.
• The Administrator account should not be intended for casual use.
• The Administrator account should only be used to administer the network or domain.
• The Domain controllers should be physically secured.
• Maintain a strong password policy. See http://www.microsoft.com/ security/guide.htm.
• Rename the Administrator account.
• Never run untrusted programs while logged in as Administrator.