Contents
Having your own server on the internet opens up numerous possibilities for the owner to use it for various purposes. However, this also comes with the responsibility of ensuring the security of the server as the owner. All actions originating from the server are the responsibility of the owner, whether they are carried out with or without the owner's knowledge. Hackers target poorly secured servers, and especially computers with Windows operating systems offer a large attack surface due to numerous security vulnerabilities in the programs used.
To prevent the server from being infiltrated by hackers and used for illegal activities such as distributing copyrighted material, the server owner should secure their system as much as possible. We provide you with some useful tips on how to make your Windows Server more secure.
Turn off or uninstall unnecessary services
Especially with Windows, the installed operating system is often packed with additional programs and server services that may not be needed. Only let the applications and services run that you need for your server operation. All unnecessary software should be turned off or uninstalled if possible. The more applications running on a server, the more potential security vulnerabilities there are. Therefore, only use software that is truly needed.
Install updates
The operating system and all installed programs must always be kept up to date. Install updates immediately after installation and check daily for new, relevant updates. Often, new versions of software disclose old security vulnerabilities, which hackers exploit to target outdated versions.
Configure the firewall
Configure your firewall to only have ports open that you are using. Unnecessary ports should be blocked. For example, a web server should have the HTTP or HTTPS port open, and if you do not transfer files via FTP, that port can be blocked.
Rename Administrator secure password
What the Root user is in Linux, the Administrator is in Windows. For example, when accessing your server via Remote Desktop, do not use 'Administrator' as the account name. Give the account an individual name and use a secure password. It should be more than 10 characters long and consist of letters, numbers, and special characters.
Remove Unnecessary Network Protocols
If you are using a server that is not connected to a network, remove the default Microsoft network protocols such as File and Printer Sharing and Microsoft Network. You do not need these for a standalone server.
Secure Programming Interfaces
Applications run on various programming languages, which can pose a security risk. Try to minimise the risk through appropriate settings. Depending on the use case and software requirements, different settings may be necessary. Here are a few examples:
Settings for PHP:
- Limited PHP to the directory being used.
- Disable public information about the PHP version.
- Disallow unnecessary PHP commands.
Settings for .NET:
- Lower the trust level for applications as much as possible.
This guide is intended to help make your Windows system more secure, but it does not claim to be exhaustive. As a server owner, it is your responsibility to continuously ensure the security of your system and stay up to date with the latest security requirements. Therefore, regularly inform yourself about developments in this area.
Also, find out how to secure a Linux server.
