Intermediate level · Module 2 of 6 · 16 guided hours
System Hardening and Access Management
Reduce attack surface on computers and accounts with secure configuration, patch management and least privilege.
Learning objectives
- Apply secure configuration to Windows computers
- Run a patch management process
- Manage accounts with least privilege
Topics
- secure baselines
- removing unneeded software
- patch management
- standard vs administrator accounts
- account lifecycle
- shared accounts
Lessons
-
Lesson 1 Secure Configuration
Reduce what an attacker can use on each computer.
attack surfacesecure baselineunneeded softwaremacro and script settings
-
Lesson 2 Patch Management
Keep every system updated through a reliable process.
inventorypatch schedulecritical updatesend-of-life software
-
Lesson 3 Least Privilege and Account Lifecycle
Give people only the access they need, for only as long as they need it.
least privilegestandard and admin accountsjoiners-movers-leaversshared accounts
Practical activity
Harden a lab Windows computer against a checklist, set up standard user accounts and write a patch and account lifecycle procedure.
Expected outcomes
- Hardened systems
- Controlled privileged access
Assessment
Hardening checklist, account set-up and procedures reviewed.
Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.