New Protocols

Windows 2000 introduces new protocols for user authentication. As you learned in Chapter 11, "Kerberos Protocol," this default new protocol offers vastly enhanced levels of security over the older NT protocols. Kerberos eliminates many of the inadequacies inherent on the Windows NT 4 implementation of user authentication.

There are now two primary protocol choices for network authentication within Windows 2000 domains:

  • Kerberos Version 5. You learned all about Kerberos in Chapter 11. This is the newer, far more secure authentication method offered in Windows 2000.

  • Windows NT LAN Manager (NTLM). This was the only network authentication protocol offered in the Windows NT 4.0 operating system. It remains available in Windows 2000 for ...

Get Microsoft® Windows® 2000 Security Handbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.