# Study Notes: ST2612 – Secure Microsoft Windows ## Module Overview ### Teaching Modes - **Duration**: 15 weeks - **Delivery Methods**: - Online lectures - On-site practical sessions and tutorials - Self-directed learning - Flipped learning (lecture topics delivered online, Q&A during tutorials) ### Assessment Components - **Breakdown**: - Assignments: 20% - Online Quizzes: 10% - Mid-Semester Test (MST): 20% - Final Exam: 40% - General Performance: 10% - **Lab Practicals**: Focus on maintaining VMware-based systems (e.g., MS Server 2016, Server 2012 R2, Server 2019, and Windows 10). Engage with self-directed learning resources like lecture slides, online materials, and case studies to reinforce your understanding. --- ## Focus Areas ### The Need for Secure Computing - **Threats**: - Viruses, worms, and programs that steal confidential information - Hacking and other malicious activities - **Sources of Security Problems**: - Poor software design and implementation - Lack of user awareness and training For instance, a poorly designed application might allow unauthorized access to sensitive data, leading to data breaches. - **Legal Frameworks**: - **California SB-1386**: Data breach notification law - **HIPAA**: Protects health information - **Gramm-Leach-Bliley Act**: Financial data protection - **Singapore Laws**: Electronic Transactions Act 2010, Personal Data Protection Act 2012 These laws hold organizations accountable for protecting user data and reporting breaches promptly. ### Safer Computing Practices - **Key Actions**: - Write secure operating systems and applications - Train users to prioritize security - Implement secure computing behaviors across management, programmers, and users --- ## Microsoft’s Commitment to Security ### Cyber Resiliency - **Definition**: The ability to anticipate, withstand, recover from, and adapt to adverse conditions or attacks. - **Features**: - System isolation (e.g., firewalls, object-level access control) - Blocking unsolicited downloads and pop-ups - Enhanced email protection via Exchange Edge Services ### Integrated Protection Technologies - **Examples**: - Microsoft Defender Antivirus - Core Isolation (Windows 10/11) - Smart Screening Technologies - Windows Update Agent Regular software updates are critical for addressing security vulnerabilities. Use tools like SCCM and WSUS for seamless updates. ### Trustworthy Computing - **Key Dimensions**: - **Security**: By design, by default, and by deployment - **Privacy**: Fair information principles - **Business Integrity**: Availability, manageability, and accuracy Focusing solely on features over security can lead to vulnerabilities. Always prioritize security in system design. --- ## Windows Server 2016 Editions ### Overview of Editions 1. **Essentials Edition**: - Supports up to 25 users - Limited to 50 Remote Desktop connections - No role for hosting virtual machines or cloud services 2. **Standard Edition**: - Includes file/print services, Active Directory, and GRE tunneling - Features like Windows Defender, storage tiering, and Hyper-V containers 3. **Datacenter Edition**: - Designed for mission-critical applications, large databases, and virtualization - Supports clustering up to 64 computers The Datacenter Edition is ideal for organizations requiring high availability and extensive virtualization capabilities. --- ## Using Windows Server 2016 with Client Systems ### Compatibility - **Best Match**: Windows 10 - **Advantages**: - Enhanced network communication - Improved diagnostics and PowerShell commands - Support for Linux clients via Linux Integration Services (LIS) ### Active Directory - **Definition**: A database of network resources (e.g., users, groups, shared printers). - **Purpose**: Simplifies resource management and enhances security. Active Directory is essential for centralized management in server-based networks. --- ## Key Features of Windows Server 2016 ### Server Manager - **Functions**: - Configure servers, roles, and system properties - Manage storage, backups, and security - Run diagnostics and monitor server health ### Security Features - **Built-in Protections**: - File and folder permissions - Data encryption - Event auditing - Authentication methods (e.g., passwords, smart cards, PKI) Security is automatically implemented during installation or when adding features. ### Virtualization - **Hyper-V Enhancements**: - Faster cloning and VM migration - Support for Windows Server and Hyper-V containers Hyper-V allows organizations to run multiple virtual machines on a single physical server, reducing hardware costs. --- ## Networking Models in Windows Server 2016 ### Peer-to-Peer Networking - **Characteristics**: - Decentralized resource sharing - Suitable for small networks - Limited security and management ### Server-Based Networking - **Advantages**: - Centralized management - Stronger security - Efficient resource sharing (e.g., file and printer sharing, email services) Server-based networking is ideal for medium to large organizations requiring robust security and centralized control. --- ## Protocols and IP Addressing ### TCP/IP Protocol - **Definition**: A set of guidelines for data formatting, transmission, and interpretation. - **Key Components**: - **TCP**: Ensures reliable data delivery - **ARP**: Maps IP addresses to physical MAC addresses ### IP Addressing 1. **Static Addressing**: Manually configured IP settings. 2. **Dynamic Addressing**: - Uses a DHCP server to assign IP addresses automatically. - Common in medium to large networks. 3. **APIPA**: - Assigns IP addresses in the range 169.254.0.1 to 169.254.255.254 when no DHCP server is available. Forgetting to configure a default gateway in static addressing can lead to connectivity issues. --- ## Key Takeaways - **Secure Computing**: Essential to protect against threats and comply with legal requirements. - **Microsoft Security Initiatives**: Focus on isolation, resiliency, and trustworthy computing. - **Windows Server 2016**: Offers robust features for security, networking, and virtualization. - **Networking Models**: Choose between peer-to-peer and server-based based on organizational needs. - **IP Addressing**: Understand static, dynamic, and APIPA configurations for effective network management. Regularly review and practice key concepts to solidify your understanding of Windows Server 2016 and secure computing principles.