Chapter 1 - Basic Windows 2000 Security: Using Security Templates

Abstract

This chapter explores the use of security templates in basic Windows 2000. It begins with a review of the Windows 2000 active directory. Active directory is the first directory service ever created. In fact, directory services have been available in a variety of network operating systems. Novell's NetWare has used the Novell directory service for quite some time now. Directory services are used primarily for organizing, locating, and managing network information. Active directory makes Windows 2000 tick. Windows 2000 relies on active directory for all types of things. The chapter examines the basic security tools at ones' disposal—those that ship with Windows 2000, those that can be found in the Windows 2000 server resource kit, and those that can be obtained from elsewhere. Thereafter, the chapter examines how security is configured via templates and group policy by taking an item-by-item approach. Each configurable item is presented along with its default setting and usage. Based on this understanding, the chapter describes the various methods of deploying security templates and security configurations. Finally, the chapter analyzes the security settings using several tools available to a user.