微软政府桌面安全管理解决方案微软(中国)有限公司2024年12月10日第2页共29页编号:时间:2021年x月x日书山有路勤为径,学海无涯苦作舟页码:第2页共29页目录1综述..........................................................................................................................................41.1背景..........................................................................................................................41.2安全需求..................................................................................................................41.3设计原则..................................................................................................................51.3.1可管理性...........................................................................................................51.3.2性能与支持能力...............................................................................................51.3.3系统整合与互用性...........................................................................................61.3.4参照标准和指导方针.......................................................................................62安全体系架构建设..................................................................................................................82.1安全体系架构定义...................................................................................................82.2建立层次化安全防御体系.......................................................................................82.3安全体系架构建设要素...........................................................................................82.3.1人-建立安全小组.............................................................................................82.3.2过程-风险评估...............................................................................................102.3.3优化与完善.....................................................................................................152.4主机层防御-桌面安全管理...................................................................................152.4.1桌面安全管理需求分析.................................................................................152.4.2微软桌面安全管理系统.................................................................................163桌面安全管理系统详述.........................................................................................................183.1产品结构................................................................................................................183.2软硬件资产收集.....................................................................................................193.3软硬件资产报表.....................................................................................................193.4补丁管理................................................................................................................203.5应用软件分发.........................................................................................................223.6远程访问................................................................................................................233.7AD目录服务集成..................................................................................................243.8高级管理特点.................................................