Security 505: Securing Windows(GCWN)

_Dark_Knight_

Hi Guys,
What are y'all thoughts on the SANS GCWN?

Ok so I searched and found this http://www.techexams.net/forums/security-certifications/55662-sans-guys-anyone-doing-gcwn.html

docrice

I just glanced at the GCWN topics on the SANS site and I wonder just how much one can learn them on his / her own. I'm sure the SEC-505 course will provide some specific tidbits and anecdotes which will help out a Microsoft admin, but my feeling is that a good portion of what that course covers can be had by reading through TechNet or other books like the Server 2008 Security Resource Kit (which I have, and isn't bad, but relatively short):

http://www.amazon.com/Windows-Server-2008-Security-Resource/dp/0735625042/ref=sr_1_1?s=books&ie=UTF8&qid=1298109169&sr=1-1

I also recommend Mark Minasi's book on Vista for those who are still in the XP-mindset:

http://www.amazon.com/Administering-Windows-Vista-Security-Surprises/dp/0470108320

The book is relatively thin and is dated because it's based on a late beta of Vista, but goes into areas like UAC, Integrity levels, file / registry virtualization, etc,. that I feel haven't been given enough attention and a lot of Microsoft admins still lack an understanding of the mechanics of those features.

Windows Internals, 5th edition by Mark Russinovich is pretty heavy on details and is a good read, but is probably overkill if you just want to learn the general security details:

http://www.amazon.com/Windows%C2%AE-Internals-Including-Windows-PRO-Developer/dp/0735625301/ref=sr_1_1?s=books&ie=UTF8&qid=1298109053&sr=1-1

but I still recommend the book (even though I haven't gone through all of it myself due to lack of time these days).

I probably debated the merits of taking this course at one point, but decided that I've spent way too much of my career focusing on the Windows side of things and need a change.

SonofRage

I took this course in December and thought it was great. It certainly is a lot of material so if you really want to learn it all you'll have to go through the books on your own. A good way to go is to go through the book at night after each class to reinforce the material. Even though I passed it, I found the certification exam difficult but I barely studied before taking it and five months had passed since the class.