Server Protection in the Enterprise
Applies To: Windows Server 2008
The following technology and tools help protect servers and help keep your network secure.
Windows Server Update Services
Windows Server Update Services 3.0 (WSUS 3.0) is a threats and vulnerabilities mitigation feature that allows you to deploy the latest Microsoft product updates to computers running Windows Server® 2008, Windows Vista®, Windows Server 2003, Microsoft Windows XP with Service Pack 2, and Windows 2000 with Service Pack 4-based operating systems.
User Account Control
User Account Control (UAC) is a threats and vulnerabilities mitigation component that allows you to perform operations as a non-administrator, but perform administrative tasks without having to switch users, or to explicitly control when administrative tasks or applications are allowed to run.
Server Core Installation Option
The Server Core installation option for the Windows Server 2008 operating system provides a minimal environment for running specific server roles that reduces the maintenance and management requirements and the attack surface for those server roles.
BitLocker Drive Encryption
Windows BitLocker™ Drive Encryption allows you to encrypt all data stored on the Windows operating system volume and configured data volumes and can help ensure the integrity of early startup components.
Encrypting File System
The Encrypting File System (EFS) is a feature that allows you to encrypt individual files on NTFS volumes.
Data Protection Manager
Data Protection Manager (DPM) offers continuous data protection for Windows application and file servers, rapid and reliable data recovery, and advanced technology for enterprises of all sizes.
Network Access Protection
Network Access Protection (NAP) is a policy enforcement platform that allows you to better protect network assets by enforcing compliance with system health requirements.
Microsoft Forefront Security Technologies
The Microsoft Forefront family of business security products is a group of threats and vulnerabilities mitigation products that can be used with current Microsoft Windows operating systems under separate license to help provide greater protection and control over the security of your network infrastructure.