Choosing the Right Security

Now that the basic differences in the three main security mechanisms in Windows 2000 have been discussed, the types of security you should plan to use as you are designing your implementation of Active Directory will be addressed. At the beginning of this chapter, we identified that there are essentially two different types of security relative to Active Directory and Windows 2000:

  1. Security for access to the network environment and Active Directory resources

  2. Security for the data that crosses the network between hosts on the network

Kerberos and PKI are security mechanisms for regulating access to the environment, whereas IPSec is a security method for regulating the data on the network.

Kerberos Compared ...

Get Windows® 2000 Active Directory™ now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.