Windows 2000 Security

E. Eugene Schultz, University of California–Berkeley Lab

About W2K

What Is W2K?

How W2K Works

Domains

Organizational Units (OUs)

Access Permissions

Kerberos

Security Support Provider Interface (SSPI)

Auditing

Encrypting File System (EFS)

Encryption of Network Transmissions

Routing and Remote Access Service (RRAS)

Certificate Services

Distributed File System (DFS)

Microsoft Management Console (MMC)

How Secure Is W2K?

How Secure Is W2K by Default?

Major Types of Vulnerabilities

How Secure Can You Make W2K Systems?

Baseline Security Measures

Conclusion

Glossary

Cross References

References

ABOUT W2K

The first section of this chapter discusses W2K, its major functions, its major capabilities, and how it works.

What Is W2K?

W2K is an operating system product that includes both workstation (Windows 2000 Professional) and server (such as Windows 2000 Server and Windows 2000 Advanced Server versions). (Still another W2K product is W2K Data Center, which is designed for large hosts that require high amounts of RAM, fault tolerance, and high-end multiprocessor support.) It supports not only desktop and office automation applications, but can also be used to run network applications that support mail services, Web services, file transfer services, a domain name service (DNS) server, and even routing and firewalling network traffic. W2K also includes many features that were not available in W2K's predecessor, Windows NT (NT), the most notable of which is W2K directory ...

Get Handbook of Information Security: Information Warfare, Social, Legal, and International Issues and Security Foundations, Volume 2 now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.