I noticed over the weekend that Microsoft's Solution Accelerator team has just released a Beta of Project Codename Sundance. This Solution Accelerator builds on previous Microsoft security guidance and is aimed at helping you configure and deploy security settings for both Windows and Office 2007. With more than 700 security setting recommendations, the guidance and tools included should help fine-tune the security posture of your Windows and Office 2007 deployments.

After deploying the security settings, you can even verify the settings and monitor policy changes by using one or more of 18 new configuration packs designed for the Desired Configuration Management (DCM) feature of Microsoft System Center Configuration Manager 2007.

This solution accelerator can help you in a number of ways:

• Accelerate and secure deployments
  Predefined templates and automated tools enable you to greatly reduce the time required to deploy security settings and monitor security baselines.
• Provide higher reliability
  Eliminate a number of manual steps and get faster, more reliable security results.
• Comprehensive solution
  Includes information about hundreds of security and privacy setting options, as well as recommendations for each one based on best practices.
• Manage risk
  Manage security setting changes in Windows operating systems and Office applications that otherwise could place the integrity of your IT systems at risk.
• Right Price
  It's free from Microsoft Connect.

I invite you to join the Beta Program for Project Codename Sundance and take a look at how it might help you secure your Windows and Office 2007 installations.

To join the Beta Program for Project Codename Sundance, please click on the following link:
https://connect.microsoft.com/InvitationUse.aspx?ProgramID=2682&InvitationID=SUN-698V-PYJF&SiteID=715

After you have joined the program, add the following link to your favorites
https://connect.microsoft.com/site/sitehome.aspx?SiteID=715 

[Edited on 12/17/2008 to provide best user experience for beta program links.]

I participated in creation of this great guide around security on Windows Server 2008 - really, you gotta see this... Also check out the new and shiny Solution Accelerator called "GPOAccelerator" - it really rocks!

Info from Microsoft:
The primary purposes of this guide are to enable you to do the following:

• Use the solution guidance to efficiently create and apply tested security baseline configurations using Group Policy.
• Understand the reasoning for the security setting recommendations in the baseline configurations that the guide prescribes, and their implications.
• Identify and consider common security scenarios, and then use specific security features in Windows Server 2008 to help you manage them in your environment.
• Understand role based security for different workloads in Windows Server 2008.

Hardening:
The WS2008 Security Guide also includes information on how to harden the following server roles and the role services that they provide:

• Active Directory Domain Services (AD DS)
• Dynamic Host Configuration Protocol (DHCP) Server
• Domain Name System (DNS) Server
• Web Server (IIS)
• File Services
• Print Services
• Active Directory Certificate Services (AD CS)
• Network Policy and Access Services
• Terminal Services

The "complete solution" from Microsoft:
The Solution Accelerator for the Windows Server 2008 Security Guide includes the following components:

• Executive Overview. A summary for business and technical managers that briefly explains how you can use the guidance and the tool for this Solution Accelerator.
• Security Guide. Recommended guidelines and best practices in a series of chapters that offer detailed guidance on how to harden servers running Windows Server 2008 that handle different workloads (see above).
• Security Settings Recommendation Appendix. A comprehensive technical reference that explains every prescribed security setting in the security guide.
• Security Settings Workbook. A resource that lists all prescribed settings for each of the preconfigured security baselines provided by the guide.
• Attack Surface Reference Workbook. A resource that lists the changes that installed server roles introduce in Windows Server 2008.
• GPOAccelerator. A tool that you can use to automatically create Group Policy objects (GPOs) recommended by the guide, which is available as a separate download. To learn more about the GPOAccelerator and download the tool, click here.

Where can I get this?
Windows Server 2008 Security Guide (online version)
Get the Windows Server 2008 Security Guide
Get the GPOAccelerator

Enjoy!

.