Microsoft Windows Security Fundamentals: For Windows 2003 SP1 and R2
Regular price
34.500 KD
inc. VAT
Couldn't load pickup availability
Table of contents
- Cover
- Copyright Pageiv
- Contentsvii
- Foreword by Tony Redmondxv
- Foreword by Mark Mortimorexvii
- Foreword by Steven Adlerxxi
- Prefacexxiii
- Acknowledgmentsxxvii
- Part I: Introduction1
- Chapter 1. The Challenge of Trusted Security Infrastructures3
- 1.1 Introduction3
- 1.2 Positioning Trusted Security Infrastructures5
- 1.3 The Fundamental Role of Trust8
- 1.4 Trusted Security Infrastructure Roles8
- 1.5 The Next Step: Federation23
- 1.6 Identity Management and Trusted Security Infrastructures27
- 1.7 Microsoft and the Challenge of Trusted Security Infrastructures31
- 1.8 Conclusion35
- Chapter 2. Windows Security Authorities and Principals37
- 2.1 Security Authorities37
- 2.2 Security Principals53
- Chapter 3. Windows Trust Relationships109
- 3.1 Defining Trust Relationships109
- 3.2 Trust Properties, Types, and Features111
- 3.3 Restricting Trusts122
- 3.4 Working with Trusts139
- 3.5 Trust Relationships: Under the Hood150
- 3.6 Trusts and Secure Channels154
- 3.7 Trusts and Firewalls161
- Chapter 4. Aspects of Windows Client Security165
- 4.1 Client Security Overview165
- 4.2 Least Privilege166
- 4.3 Windows XP Service Pack 2 Security Enhancements178
- 4.4 Browser Security186
- 4.5 Malicious Mobile Code Protection205
- 4.6 Leveraging Trusted Platform Module Security Functions215
- 4.7 Important Windows Vista and IE 7.0 Client Security Features228
- Part II: Authentication231
- Chapter 5. Introducing Windows Authentication233
- 5.1 Authentication Basics233
- 5.2 Windows Authentication Basics238
- 5.3 Logon Rights255
- 5.4 NTLM-Based Authentication261
- 5.5 Anonymous Access271
- 5.6 Credential Caching277
- 5.7 Limiting Concurrent Logon Sessions281
- 5.8 General Authentication Troubleshooting292
- 5.9 What’s in the Other Authentication Chapters?301
- Chapter 6. Kerberos303
- 6.1 Introducing Kerberos303
- 6.2 Kerberos: The Basic Protocol307
- 6.3 Logging on to Windows Using Kerberos327
- 6.4 Advanced Kerberos Topics345
- 6.5 Kerberos Configuration390
- 6.6 Kerberos Troubleshooting394
- 6.7 Kerberos Interoperability396
- Chapter 7. IIS Authentication409
- 7.1 Secure by Default in IIS 6.0409
- 7.2 Introducing IIS Authentication411
- 7.3 HTTP Authentication414
- 7.4 Integrated Windows Authentication426
- 7.5 Passport-Based Authentication428
- 7.6 Certificate-Based Authentication445
- 7.7 IIS Authentication Method Comparison475
- Chapter 8. UNIX/Linux and Windows Authentication Integration477
- 8.1 Comparing Windows and UNIX/Linux Authentication478
- 8.2 Interoperability Enabling Technologies479
- 8.3 UNIX/Linux Security-Related Concepts484
- 8.4 Windows and UNIX/Linux Account Management and Authentication Integration Approaches498
- 8.5 Summary532
- Chapter 9. Single Sign-On533
- 9.1 SSO: Pros and Cons533
- 9.2 Web versus Enterprise SSO534
- 9.3 SSO Architectures535
- 9.4 Extending SSO550
- 9.5 Microsoft SSO Technologies553
- 9.6 Conclusion579
- Part III: Authorization581
- Chapter 10. Windows Server 2003 Authorization583
- 10.1 Authorization Basics583
- 10.2 The Windows Authorization Model584
- 10.3 Authorization Intermediaries590
- 10.4 Windows 2000 Authorization Changes624
- 10.5 Windows Server 2003 Authorization Changes659
- 10.6 Authorization Tools690
- Chapter 11. Active Directory Delegation693
- 11.1 Introduction693
- 11.2 General AD Delegation Guidelines705
- 11.3 Setting up Administrative Delegation719
- 11.4 Hiding Objects in AD732
- 11.5 Third-Party AD Delegation Tools771
- Index773
This is the first of two books serving as an expanded and up-dated version of Windows Server 2003 Security Infrastructures for Windows 2003 Server R2 and SP1 & SP2. The authors choose to encompass this material within two books in order to illustrate the intricacies of the different paths used to secure MS Windows server networks.
Since its release in 2003 the Microsoft Exchange server has had two important updates, SP1 and SP2. SP1, allows users to increase their security, reliability and simplify the administration of the program. Within SP1, Microsoft has implemented R2 which improves identity and access management across security-related boundaries. R2 also improves branch office server management and increases the efficiency of storage setup and management. The second update, SP2 minimizes spam, pop-ups and unwanted downloads. These two updated have added an enormous amount of programming security to the server software.
* Covers all SP1 and SP2 updates
* Details strategies for patch management
* Provides key techniques to maintain security application upgrades and updates
Since its release in 2003 the Microsoft Exchange server has had two important updates, SP1 and SP2. SP1, allows users to increase their security, reliability and simplify the administration of the program. Within SP1, Microsoft has implemented R2 which improves identity and access management across security-related boundaries. R2 also improves branch office server management and increases the efficiency of storage setup and management. The second update, SP2 minimizes spam, pop-ups and unwanted downloads. These two updated have added an enormous amount of programming security to the server software.
* Covers all SP1 and SP2 updates
* Details strategies for patch management
* Provides key techniques to maintain security application upgrades and updates