Name : Bobby Davasia Title : Technology Specialist Company : Microsoft India

Transcription

1

2 Name : Bobby Davasia Title : Technology Specialist Company : Microsoft India

3 Session Objectives And Takeaways Get Overview of Security Compliance Management Toolkit Series Learn Easy Security Baseline Deployment Automation Get Simple Steps of Security Baseline Monitoring and Compliance Obtain Information about Future Plan and Opportunity to Participate Security Compliance Management Toolkit is FREE

4 Customer Challenges Lack of timely prescriptive security guidance Lack of automation tools IT compliance is difficult to manage Inconsistent consumer experience

5 Unified Approach Based on IT Management Cycle Plan and deploy your security baseline Windows Vista Windows XP Windows Server 2008 Deploy security settings with the GPOAccelerator Windows Server Microsoft Office Step1: Understand compliance requirements Step 2: Read prescriptive guidance Monitor and verify your security baseline Step 3: Deploy using GPOAccelerator DCM User Guide Step 4: Monitor compliance with DCM feature Apply Configuration Packs for operating systems and applications Use the DCM feature of SCCM Run compliance reports

6 Evolution of the Security Guide Guidance XLS XML data files Security Templates (GPO s) SCCM DCM Configuration Packs

7 Security Solution Portfolio Released Today Windows XP Security Baseline Windows Vista Security Baseline Windows Server 2003 Security Baseline Windows Server 2008 Security Baseline 2007 Office Security Baseline Hyper-V Security Guide

8 Security Baseline Portfolio Under Development Windows 7 Security Baseline Internet Explorer 8.0 Security Baseline Exchange Server 2007 Baseline System Center Extension for SCAP Security Compliance Manager (Baseline Management and Customization Tool)

9 Toolkit Components

10 Deploy A Security Baseline Use GPOAccelerator Deploys security configurations quickly and reliably Save hours of time Provides lab option and sample OU s Extending functionality Extend to include Windows Server 2003 Address stand alone scenario

11 Deploy a Security Baseline

12 Are You Now Compliant? Group Policy can drift Federated environments, Distributed IT Management Policy Policy Mismanagement Orphaned machines Audit Requirements Can you prove your compliance? Can you provide reports?

13 Monitoring a Security Baseline Use DCM Configuration Packs 26 DCM Configuration Packs based on security guides Guidance Baseline Compliance Management Overview DCM Configuration Pack User Guide

14 Overview: What is DCM? DCM will enable customers to: Define corporate configuration standards Report on configuration compliance across managed Windows systems Combine DCM compliance data with other feature areas of ConfigMgr to remediate clients

15 Core Scenarios Detect server configuration drift Approximately ½ of unplanned downtime due to configuration problems! Improve Helpdesk troubleshooting and time-to-resolve Helpdesk represents the single largest people cost to IT Regulatory compliance reporting Define and report against tangible configuration policies for regulatory compliance Pre- and post- change verification Ensure system readiness Verify accuracy and efficacy of planned changes

16 Overview: Terms & Concepts Configuration Item (CI) CIs represent meaningful units of configuration policy that can be detected, applied, and removed Application CI Operating System CI General CI Software Updates CI Configuration Baseline A configuration baseline is a complex type of CI composed of other Cis classified as required, optional or prohibited within the baseline. This is the primary unit of administrative work and can be assigned to collections for compliance monitoring.

17 Overview: Data flow Configuration Packs 1 Configuration Items created by import ConfigMgr Database ConfigMgr Admin Console ConfigMgr Server 2 New Configuration Items authored 3 Configuration Baseline defined using CIs Windows Server 2003 CI Line-of-business Application CI Line-of-business Application Server Baseline Antivirus Software CI Compliance State Tables Managed Client Active Directory Script SQL WMI XML Registry 4 Configuration baseline assigned to collection 6 5 Compliance DCM discovers CIs and validates data against rules state sent to ConfigMgr Database for reporting File Software Updates IIS Configuration Manager Client MSI

18 Admin Tasks Develop configuration knowledge Author new CIs and Baselines in admin console Author Configuration Packs for import Import best practice Configuration Packs Assign Baselines Set compliance evaluation schedule per assignment Review compliance reports Build query-based collections using DCM compliance state messages

19 Building knowledge Sources of CI data Microsoft and other software vendors Download portal on Microsoft.com Solutions integrators, consulting services Line of business application developers IT personnel

20 Monitoring a Security Baseline

21 Key Benefits Accelerate adoption Leverage existing investments Save money and time Increase customer & partner satisfaction Free

22 Download Now

23

24 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

25