Chapter 5 - Security Configuration Tool Set

Abstract

This chapter introduces the functions and uses of the Windows 2000 Security Configuration Tool Set. The Tool Set is a response to systems administrators' need for a central, easy-to-use program that will allow configuration of domain, organizational unit, and local security. In Windows NT 4.0, configuration of various security parameters required using multiple tools, such as User Manager, User Manager for Domains, Transmission control protocol (TCP)/ Internet protocol (IP) properties, direct registry edits, and the Remote Access Server (RAS) administrator. The Tool Set makes it possible to configure and manage these security services from a single, centralized interface. In addition to conveniently bringing together formerly widely disparate programs into a single interface, the Security Configuration and Analysis snap-in allows the administrator to analyze a local machine's current configuration. This analysis can be performed against security templates, so that the network manager can compare the present configuration to a proposed ideal configuration, which can then be applied with a couple of simple clicks of the mouse. The Tool Set allows the administrator to handle the configuration and management of the Windows 2000 security scheme.