Table of ContentsWindows NT 5.0Security OverviewPeter BrundrettProgram ManagerWindows NT SecurityMicrosoft Corporation Windows NT Security Goals Next-Generation Windows NT Directory Service Windows NT Directory Security features Fundamental RelationshipsDirectory and security What Are Security Principals? User Administration Group Administration Domain Policy Object Kerberos Policy Local Policy Object Privileges, Rights, And Administrative Roles Security Policy Objects Access Rights Inheritance Model Delegation Of Administrative Control Delegation Of ControlExample 1 Delegation Of ControlExample 2 Multiple-Master Domain Next-GenerationDomain Trust Domain Trust Administration New AuthenticationFeatures Kerberos Integration KerberosProtocol Advantages Kerberos Authentication Network Server connection Building An Access Token From A Kerberos Ticket Remote File Access Check Architecture For Multiple Authentication Services Integrated Public Key Security Public Key Components Crypto API Architecture Secure Channel SSL Client AuthenticationIntegrated security administration Directory Support for X.509 Certificates Microsoft Certificate Server Requesting A Certificate Over HTTP Management Of Trust Identity Mapping Identity Mapping Encrypting File System PPT Slide File Encryption File Decryption File RecoveryNever divulges user’s private key Security Configuration Editor Security Configuration and Analysis MMC Snap-in Managing Security Configuration Windows NT 5.0 Summary Windows NT 5.0 Summary For More Information final slide of presentation |
Author: Peter Brundrett |