Windows Server 2003 Hardening Checklist Introduction: This checklist contains server hardening procedures that balance industry best practices with the unique requirements of UCDHSC’s environment. Since Windows Server 2003 does not come configured securely out of the box it is necessary to follow these steps to prevent attacks from exploiting known vulnerabilities. These steps should be followed to secure a typical UCDHSC Windows 2003 server, but may not be appropriate in all cases. In cases where an exception must be made, documentation should be retained on this worksheet describing the reason for the exception and any mitigating actions. In all cases, this worksheet should be retained for future reference.