OS Hardening for Windows 2000 & 2003

Last Updated by asmith 2006.12.04

Run a Vulnerability scan on the system in question as well as a virus scan using any or all of the following:

Secure /tmp and /var/tmp

If they are running cPanel (I usually look for the '/scripts' directory) then run /scripts/securetmp This will remount the '/tmp' and '/var/tmp' as 'noexec'.

Sometimes cPanel has an issue with /tmp permissions. Run the following:

root# ls -al /

if you see:

drwxr-xr-x   5 root   root   xxxxx mon xx xx:xx /tmp

You’ll need to chmod the /tmp directory to 1777 in order to set the sticky bit.

Check to make sure the server is not compromised first. We will NOT harden a compromised server.

export HISTFILE=/dev/null

You can use the following to usually accomplish this: