This section will build on the basic NT security knowledge you have already gained. However, you will find that every NT security function is magnified in Windows 2000, and Windows 2000 has ten times the security features available in Windows NT. If NT were a row boat, Windows 2000 is the QE2. If NT were a cottage, then Windows 2000 is a 56 room mansion. Active Directory, security templates. | Windows 2000 Security Security Essentials The SANS Institute Windows 2000 Security - SANS 2001 1 This section will build on the basic NT security knowledge you have already gained. However you will find that every NT security function is magnified in Windows 2000 and Windows 2000 has ten times the security features available in Windows NT. If NT were a row boat Windows 2000 is the QE2. If NT were a cottage then Windows 2000 is a 56 room mansion. Active Directory security templates Group Policy System File Protection Radius IPSec EFS PKI Kerberos a new permission inheritance model and granular assignment of administrative authority are but a few of the technologies and processes that you must understand if you are to design and implement security in Windows 2000. This section will introduce you to the possibilities. 3 - 1 Your Goals Understand Security Baselining Describe Security features - all versions roles Describe Security features - Active Directory domain List 10 hardening steps Windows 2000 Security - SANS 2001 2 Goals and Objectives We cannot talk about security and Windows 2000 without recognizing that there is more than one version of Windows 2000 and there are many functional roles that Windows 2000 may perform within a network or standing alone. Windows 2000 may be on a laptop computer as it travels from hotel to hotel to home to office. It may be on massive database servers or limited desktop systems. Windows 2000 may serve as the OS for mail servers web servers file servers firewalls and many other roles. When you discuss security and Windows 2000 you must discuss it within the context of its use. How secure is Windows 2000 How secure do you need it to be How much knowledge do you have of its features and function Where will it be asked to perform Who will be using it All of these questions must be asked and understood. In this section we will discuss the need for security baselining or the matching of security needs with system functions and the .
