Windows Server® 2008 Security Resource Kit

Summary

Passwords and authentication is a complicated and very interesting area. It underlies so much of what we do in all other areas of security. While you do not have to be an expert on authentication to manage Windows servers, you must have enough of an understanding of the basic concepts to make intelligent decisions about authentication. If you have ever dealt with consultants or auditors you have probably run into one of the few, but far too many, who do not understand passwords and authentication, but yet make requirements regarding how they should be managed. More than one network has been either destroyed directly by these changes, or hacked afterward because the changes were ineffective against the relevant attacks. Only by understanding ...