More info on http://techdays.be.

1. Securing a Windows
Infrastructure using Windows
Server 2012 & Windows 8 Built-in
features
Marcus Murray & Hasain Alshakarti
Truesec Security Team, MVP-Enterprise Security
x2

2. Marcus Murray Hasain Alshakarti

3. So.. What are the new security features in Windows
8 & Server 2012?

4. Secure boot/Measured boot/Early Malware detection
Client
User
Web rv

5. Bitlocker enhancement This feature requires the client hardware to have a DHCP
driver implemented in its UEFI firmware.
• Enhancements: Client
– Bitlocker Network unlock
– New protectors User
•For NKP, the win8 client should be using UEFI 2.3.1
BitLocker Network Unlock has the following software and hardware requirements that must be met before you can
use it:
Client computer requirements
•A DHCP driver that is implemented in the UEFI firmware
•Trusted Platform Module (TPM) 1.2 or TPM 2.0
•BitLocker enabled on the operating system volume
Windows Deployment Services server requirements
•BitLocker Network Unlock feature installed (only available in windows server 2012)
•2,048-bit RSA public/private key pair X.509 certificate present in FVENKP certificate store
Domain controller requirements
•Copy of the BitLocker Network Unlock Certificate from the Windows Deployment Services server on the domain
controller to set Group Policy settings for Network Unlock. (2012 server

6. Virtual smartcard
Client
User
Web Srv

7. Claims
Client
User
Client
User
Web Srv

8. Dynamic access control

9. Data classification
Secret stuff.doc Project X.doc Public statement.doc
Required Clearance: Required Clearance: Required Clearance:
Restricted Internal Use Public
Confidentiality: Confidentiality: Confidentiality:
High Moderate Low
http://www.microsoft.com/en-
us/download/details.aspx?id=27123

10. Dnssec
Client
User
Client
User
Web Srv

11. Unified Remote access
Client
User
Client
User
Web Srv

12. Powershell remoting
Client
User
Client
User
Web Srv

13. FGPP Ui

14. Improved Security Audit
• Advanced Security Audit Client
Policy Step-by-Step Guide
User
<http://technet.microsoft.com/en- Client
us/library/dd408940(v=ws.10).aspx>
User
Web Srv

16. Marcus Murray Hasain Alshakarti

17. Thank you for listening! 