Using the Security Configuration Wizard to Help Secure Speech Server
This content is no longer actively maintained. It is provided as is, for anyone who may still be using these technologies, with no warranties or claims of accuracy with regard to the most recent product version or service release.
The Security Configuration Wizard (SCW), which is available on Microsoft Windows Server 2003, applies the minimum set of functionality to the computer required by specific server roles and features. Functionality that is not required is disabled, which effectively reduces the risk of security threats from remote computers.
When you install Speech Server, an XML document is included in the installation directory that specifies the services, network ports, and other features required by Speech Server. SCW uses this file and other similar XML documents for other programs to create a security policy for the server roles you need and then applies the policy to the computer to ensure that only required functionality is enabled.
Using SCW involves the following tasks:
Installing SCW using the Add/Remove Windows Components feature of Windows Server 2003.
Registering Speech Server with SCW.
Note
If you install SCW before installing Speech Server, you do not need to register Speech Server with SCW. The Speech Server Setup program automatically does this step.
Creating and applying a security policy based on roles that you specify.
Configuring other computers running Speech Server with the same settings.
For more information, see Security Configuration Wizard.
Using SCW
To install SCW
Click Start, point to Control Panel, and then click Add or Remove Programs.
In the Add or Remove Programs dialog box, click Add/Remove Windows Components.
In the Windows Components Wizard dialog box, select the check box next to Security Configuration Wizard.
Click Next to install the wizard.
When the completion page appears, click Finish, and then close Add or Remove Programs.
To register Speech Server with SCW
Click Start, click Run, type cmd, and then press ENTER.
At the command prompt, type the following, and then press ENTER.
scwcmd register /kbname:SpeechServer /kbfile:installDir\Common\Management\SpeechServer.xml
where installDir is the directory in which Speech Server is installed.
To create a security policy and apply it
Click Start, point to Administrative Tools, and then click Security Configuration Wizard.
On the Security Configuration Wizard Welcome page, click Next.
Click Create a new security policy, and then click Next.
The name of the local computer should appear in the Server box.
If it does not appear, type the name of the computer running Speech Server in the Server box, and then click Next.
After the Security Configuration Wizard processes data about roles and features available on the computer, click Next.
On the Role-Based Service Configuration page, click Next.
On the Select Server Roles page, select the Speech Server check box (and any other roles relevant to the computer's purpose), and then click Next.
Complete the remaining pages of the wizard accepting the default settings in most cases.
At the end of the wizard, name and apply the policy.
To apply a security policy to a computer
Click Start, click Run, type cmd, and then click OK.
At the command prompt, type the following, and then press ENTER:
scwcmd configure /m: computerName /p: policyFile
where computerName is the name of the computer to which you want to apply the policy and policyFile is the path and file name of the policy file to apply to the computer.