Windows 2000 Security Hardening Guide

    Download this general guide on how to configure security on Windows 2000.
    • Version:


      File Name:


      Date Published:


      File Size:

      1.8 MB

        This document provides administrator guidance for how to set up and configure secure Windows 2000 systems in several scenarios. This document is a baseline for other hardening guides published by Microsoft, such as the Microsoft Solutions for Security.

        This document is not meant as a replacement for the Windows 2000 Common Criteria Security Configuration Guide, but rather as a more generally applicable hardening guide which applies to a much broader range of specific systems which may include or exclude services specified in the Windows 2000 Common Criteria evaluated configuration. The Common Criteria guide is designed for general purpose systems that specifically need to be compliant with the Common Criteria evaluation requirements and sacrifices some usability to do so. The document you are currently reading is designed to provide more generic guidance for a wider range of specific system classes, without necessarily trading off basic operating system functionality. The recommendations in this guide were generally chosen to safely allow Microsoft customers to deploy the recommended settings on existing Windows 2000 systems, not just on newly-built systems. We have also reviewed the default permissions on Windows Server 20003 and recommended those permissions here where they did not break existing Windows 2000 Server services.

        This guide covers hardening of Windows 2000 in three different configurations each for Windows 2000 Professional and the Windows 2000 Server family. The configurations are designed to be very generic to enhance applicability.

        The configurations covered in this guide are:
        • Windows 2000 Professional
        • Domain member workstation
        • Domain member laptop
        • Stand-alone workstation
        • Windows 2000 Server Family
        • Domain controller
        • Domain Member server
        • Stand-alone server

        For more specific hardening advice with more detail on particular server environments, please refer to the Securing Windows 2000 Server Security Solution.

        The downloadable guide was updated on January 19, 2004 to correct several minor issues in the guide and the associated templates. For complete information on the changes, refer to the Revision History section in the guide itself.
    • Supported Operating System

      Windows 2000, Windows 2000 Service Pack 3, Windows 2000 Service Pack 4

        • While the guide can be read on any platform that can run Microsoft Word, the hardening templates should only be applied to systems running Windows 2000 Service Pack 3 or higher.
        • Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint File Formats (available as a free download) can be used to open, edit, and save documents, workbooks, and presentations in the file formats new to Microsoft Office 2007.
        • Microsoft Word or Microsoft Word Viewer (available as a free download) can be used to view Word documents.
        1. Click the Download button on this page to start the download.
        2. Do one of the following:
          • To start the installation immediately, click Open or Run this program from its current location.
          • To copy the download to your computer for installation at a later time, click Save or Save this program to disk.

    Popular downloads

      • 01

        DirectX End-User Runtime Web Installer

        The Microsoft DirectX® End-User Runtime provides updates to 9.0c and previous versions of DirectX — the core Windows® technology that drives high-speed multimedia and games on the PC.

      • 03

        Malicious Software Removal Tool

        This tool checks your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove the infection if it is found. Microsoft will release an updated version of this tool on the second Tuesday of each month.

      • 04

        Windows 7 Upgrade Advisor

        Download and run the Windows 7 Upgrade Advisor to see if your PC is ready for Windows 7. It scans your hardware, devices, and installed programs for known compatibility issues, gives you guidance on how to resolve potential issues found, and recommends what to do before you upgrade.

      • 05

        Microsoft Security Essentials

        Microsoft Security Essentials provides real-time protection for your home or small business PC that guards against viruses, spyware, and other malicious software.

    Loading your results, please wait...

    Free PC updates

    • Security patches
    • Software updates
    • Service packs
    • Hardware drivers

    Microsoft Suggests

    Windows 10. The best Windows ever.
    Windows 10
    The best Windows ever.
    Upgrade for free*