Redmond, WA - After a long and laborious beta cycle, Windows Server 2003 Service Pack 1 has been released to the public, as well as the x64 editions of Windows XP Professional and Windows Server 2003...
"With Windows Server 2003 Service Pack 1, our development team took the time to treat the root cause of many security issues, not just the symptoms. This service pack is very significant and should help address certain classes of exploits," said Bob Muglia, senior vice president of the Windows Server Division at Microsoft. "Service Pack 1 is a major component of our overall strategy to help keep customers as secure as possible. I encourage all of our Windows Server 2003 customers to deploy Service Pack 1."
Security Configuration Wizard. Customers can more easily reduce attack surface area with the new Security Configuration Wizard. The tool reduces the attack surface by gathering information about specific server roles, then automatically blocking all services and ports not needed to perform those roles.
Windows Firewall. Customers can increase their security with the new Windows® Firewall on the server, allowing networkwide control through Group Policy. Also released with Windows XP Service Pack 2, Windows Firewall serves as a host (software) firewall around each client and server computer on a customer's network.
Post-Setup Security Updates (PSSU). Servers are vulnerable during the time between their installation and application of the latest security updates. In response, Windows Server 2003 Service Pack 1 blocks all inbound connections to the server after installation until Windows Update has delivered the latest security updates to the new computer.
Other Service Pack 1 features that offer customers a more robust security defense include Internet Information Services (IIS) 6.0 Metabase Auditing, which allows administrators to identify potential malicious users should the store become corrupted, stronger defaults and privilege reduction on services to establish a minimum security threshold for applications, and the addition of Network Access Quarantine Control components to allow administrators to isolate out-of-date virtual private networking (VPN) assets.
Windows Server 2003 x64 Editions and Windows XP Professional x64 Edition will be available through partners sometime in April.
|
