No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

CloudEC V600R019C00 Security Maintenance (Enterprise On-premises, Only Conference)

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Security Maintenance for the Windows Server Operating System

Security Maintenance for the Windows Server Operating System

Creating a Maintenance Account

Assign one maintenance account to each maintenance engineer, add maintenance accounts to the maintenance group, and assign maintenance rights to maintenance personnel corresponding to their responsibilities. In addition, you must periodically audit the maintenance personnel information.

Based on the minimum account principle, the administrator can create maintenance accounts based on the site's scenario.

  1. Choose Start > Programs > Administrative > Computer Management. The Computer Management window is displayed.
  2. Choose Computer Management > System Tools > Local Users and Groups > Users.
  3. Choose Action > New User.

    The New User dialog box is displayed.

  4. Set the parameters.
  5. Click Create.
  6. Click Close.

Changing Account Rights

The administrator can change account rights by adding an account to or deleting an account from a group.

The operation procedure is as follows:

  1. Choose Start > Programs > Administrative > Computer Management.

    The Computer Management window is displayed.

  2. Choose Computer Management > System Tools > Local Users and Groups > Users.
  3. Double-click the account whose rights need to be changed.
  4. In the Properties dialog box, click the Member Of tab.
  5. Click Add and select a group in the Select Group dialog box that is displayed.
  6. Click OK.

Enabling and Disabling an Account

To improve system security, the administrator can disable accounts that are not in use temporally and enable them when they are required based on site requirements.

The operation procedure is as follows:

  1. Choose Start > Programs > Administrative > Computer Management.

    The Computer Management window is displayed.

  2. In the console tree, choose Computer Management > System Tools > Local Users and Groups > Users.
  3. Right-click an account and choose Properties from the shortcut menu.
  4. Select or deselect the Account is disabled check box on the General tab.
  5. Click OK.

Deleting an Account

To improve application system access security, the administrator can delete accounts that are not used any more.

The operation procedure is as follows:

  1. Choose Start > Programs > Administrative > Computer Management.

    The Computer Management window is displayed.

  2. In the console tree, choose Computer Management > System Tools > Local Users and Groups > Users.
  3. Select the user name to be deleted, and click Delete.
  4. Click Yes.

Checking Accounts

The administrator must periodically check maintenance accounts and application accounts to verify that all existing accounts are necessary and that account rights are appropriate.

Changing the Password

If a user forgets the account password or wants to change the password for security causes, the administrator can reset the password.

NOTE:

You are advised to change the password periodically to ensure account safety. The password must meet complexity requirements.

  1. Choose Start > Programs > Administrative > Computer Management.

    The Computer Management window is displayed.

  2. In the console tree, choose Computer Management > System Tools > Local Users and Groups > Users.
  3. Right-click the account whose password needs to be changed, and choose Set Password from the shortcut menu.
  4. Read the warning message and click Proceed if you want to proceed.
  5. Enter the new password and click OK.
  6. Click OK.

Checking Processes

During security maintenance, the administrator must check whether unnecessary processes exist. If yes, the administrator must delete them to avoid security risks.

Checking Services and Ports

The administrator must check whether unnecessary services exist. If yes, the administrator must stop them to avoid security risks.

For details about system services and ports, see Communication Matrix.

Translation
Download
Updated: 2019-08-07

Document ID: EDOC1100059091

Views: 16386

Downloads: 9

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next