> Based on what I understand at this point, I would suggest the following
> general approach for NT/Win2K servers, assuming that a server fails and
> need to be recovered from "scratch".
> 1.   Load the OS from CD.
> 2.   Load the TSM Client software from CD/Diskette.
> 3.   Recover all Application and "HARDENING" files via TSM mechanism.
> 4.   Recover all Registry entries via TSM mechanism.
> 5.   Retest the Server Hardening with IT Security to validate that the
> recovery was successful
> 6.   Return the Server to production status.
>
> We'd probably want to use a similar process for UNIX systems.

The BMR product from The Kernel Group would probably be capable of recreating
a server with hardening in place. BMR boots a copy of the operating system
that is used solely as a means of running TSM restores, restores exactly
the population of files that the production operating system had before the
crash, and boots the production operating system. You might have trouble
getting all the network services used by BMR to work in the presence of a
firewall.