This document provides security guidance on the installation, configuration and use of Oracle Application Server 10g Enterprise Edition (OAS 10g EE) running on Windows Server 2003. OAS 10g EE is a J2EE-compliant application server developed by Oracle, Inc. This guide discusses security-relevant recommendations for OAS 10g EE running on Microsoft Windows Server 2003 and does not consider the installation, configuration or operation of this product on other Windows or non-Windows platforms.