Mission-Critical Active Directory
Learn how to plan and manage a large-scale enterprise through Windows 2000 Active Directory.
TABLE OF CONTENTS Mission-Critical Active Directory
Chapter 5: Fundamentals of Windows 2000 Security
This chapter provides an introduction to Windows 2000 security. It covers general security concepts, such as the goals of security and the fundamentals of cryptography. The bulk of the chapter discusses two fundamental operating system security services and the way they are implemented in Windows 2000: access control and auditing. Since authentication is such a big topic, it will be covered in detail in Chapter 6. The reason why we will spend so much time on security is not just because we like it so much, but mainly because we think that a solid understanding of the Windows 2000 security features is a key requirement for the creation of a secure and reliable enterprise Active Directory infrastructure.
5.1 Introduction to Windows 2000 security headlines
The next five chapters of this book will focus on Windows 2000 security. We will cover operating system security, security management, and public key infrastructures. As an introduction, here are the Windows 2000 security headlines.
5.1.1 Integrated with the directory services
Windows 2000 security is tightly integrated with the Windows 2000 directory system: the Active Directory. This integration is implemented as follows:
- The Active Directory is used to store security-related account information.
- Access to the Active Directory is secured via the operating system: The operating system enforces the Windows 2000 access control model on all directory objects. Also, the operating system authenticates every directory access.
5.1.2 Based on open standards
Windows 2000 security is based upon numerous open standards. Open standards facilitate security interoperability between Windows...
Copyright Butterworth-Heinemann 2001 under license agreement with Books24x7
