| The answer here very much depends on the use of the server and the risks associated with that use and your general network architecture. However a simple checklist is below. shut down all un-necessary services create individual admin users (avoid using admin) - this helps with accounting for actions disable all guest accounts Setup auditing Setup account policies with password restrictions and account lockouts Ensure the disks are NTFS and not DOS formatted Create a regular backup policy - including the registry Put legal notices on the login banner Tighten the default permissions Install monitoring and other security tools Patch your system regularly (keep an eye on TECS for the latest news) Finally have the system audited by an independent third party on a regular basis. | 