What Does Kerberos Do for Windows 2000?

Version 5 of the Kerberos authentication protocol is the default network authentication protocol in a Windows 2000 environment. Microsoft has promised that their implementation of the Kerberos protocol will be fully compliant with the Internet Engineering Task Force (IETF) Kerberos V5 specification (RFC 1510 and 1964). Kerberos provides a number of benefits over the current Windows NT 4.0 authentication protocol, NT LAN Manager (NTLM). Kerberos offers the following advantages over NTLM: faster session establishment, the creation of transitive trusts, and the support for the delegation of authentication. Also, Kerberos, along withthe Active Directory (AD), provides for single sign-on (SSO) in the Windows ...

Get Microsoft® Windows® 2000 Security Handbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.