Chapter 3 - Creating User and Group Strategies

Abstract

It is noted that the network administrator must be able to develop strategies for authenticating the identity of anyone who uses network resources, and plan for how to use groups most effectively in order to provide the level of security and access needed. Proof of identity is often required to ensure that someone is not trying to use another's identity. In today's environment, a well-defined password policy including account lockout, password rotation, and other options to ensure limited access to the network, is absolutely necessary. This chapter discusses the password policy for Windows Server 2003 network. Tools such as biometric devices, token devices, voice identification, and smart cards are becoming much popular for user authentication as the price continues to drop and acceptance continues to rise. It is noted that an effective authentication strategy works hand in hand with a security group strategy. A well-designed group strategy ensures that users receive only the appropriate level of access to resources on the network. It also reduces the workload of the administrator and makes it easier to manage large numbers of users.