MCSE : Security Specialist
Windows 2000
Client Support
Windows 3.x, Windows 95, Windows 98, and Windows NT Workstation 4.0.
Interoperability
Windows 2000 Server supports UNIX, Novell NetWare, Windows NT Server
4.0, and Macintosh.
Authentication
Successful user authentication in a Windows 2000 computing
environment consists of two separate processes: interactive logon,
which confirms the user's identification to either a domain account
or a local computer, and network authentication, which confirms the
user's identification to any network service that the user attempts
to access.
Types
of authentication that Windows 2000 supports are:
-
Kerberos V5 is used with either a password or a smart card for
interactive logon. It is also the default method of network
authentication for services.The Kerberos V5 protocol verifies
both the identity of the user and network services.
-
Secure Socket Layer/Transport Layer Security (SSL/TLS)
authentication, is used when a user attempts to access a secure
Web server.
File and Print Services
You
can add and maintain printers in Windows 2000 using the print
administration wizard, and you can add file shares using Active
Directory management tools. Windows 2000 also offers Distributed
File Services, which let you combine files on more than one server
into a single share.
Security
User-level security protects shared network resources by requiring
that a security provider authenticate a user’s request to access
resources. The domain controller , grants access to the shared
resource by verifying that the user name and password are the same
as those on the user account list stored on the network security
provider. Because the security provider maintains a network-wide
list of user accounts and passwords, each client computer does not
have to store a list of accounts.
Share-level security protects shared network resources on the
computer with individually assigned passwords. For example, you can
assign a password to a folder or a locally attached printer. If
other users want to access it, they need to type in the appropriate
password. If you do not assign a password to a shared resource,
every user with access to the network can access that resource.
See
also Encrypting File System
|
