MCSE means Must Call Someone Else. I remember a book, yellow and black : MCSE for dummy!

It's exactly that : MCSE is for dummy and I know many company that refuse to work with MCSE because they had too much bad experience with them.

And also, remember that only Windows needs to work before being secure. Windows needs its own security holes for working.

Just do your network with Unix, the operating system that creates and still operates Internet. You will have no problem of getting and keeping it operational, as you will have no problem to secure it.
Try to disable null session on a domain controler ; try to block remote command execution over NetBios on a file server ; try to manage your server remotely without opening an access as large as a remote desktop ?

You can not : Windows is not designed for being managed remotely (and it's a major requirement for servers all over the world) as it is designed for exploiting itself its own security holes.

Just try to follows security recommandation from Microsoft. They said it : Do not trust us! One of their security bulletin ask to remove them from the trusted key list. But if you do that, many parts of Windows will not work any more. You can not. By using Windows, you have no choice than to be insecure or not operational, and Microsoft themselve said it.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/166/20367#20367