.net barcode generator Managing Network Security in VS .NET

Encoder Denso QR Bar Code in VS .NET Managing Network Security

11

A Microsoft Windows Server 2003 domain with a domain controller (Computer1) and member server (Computer2). Assigned a static address for the member server if you have been using a Dynamic Host Configuration Protocol (DHCP) assigned address in previous exercises. Installed Network Monitor. A computer running Microsoft Windows 2000 Professional. It should not be a member of the domain. If you do not have a system running Windows 2000 Pro fessional, you can remove the member server from the domain and use it instead; you will get the same results with Windows Server 2003.

11-3

Managing the Windows Server 2003 family couldn t be easier. Right. Well, the process is greatly simplified; you can manage most network security settings from two interfaces: the Local Security Policy console and the IP Security Policy Management snap-in. However, it is not necessary to configure security one computer at a time. You can develop a master security administration process by using security templates and the Security Configuration And Analysis snap-in. You can apply multiple security tem plates, one for each server role, by using batch files or, in a Windows Server 2003 domain, by using Group Policy. In this manner, all computers in a domain will period ically receive security policy. Furthermore, you can easily administer, monitor, and troubleshoot security policy using native tools. This section lays the groundwork for that type of enterprise-level plan by introducing the tools and processes involved and by emphasizing sound secu rity axioms. However, this section is not a reference on using Group Policy to imple ment a security plan, nor does it fully explore every setting you must make to ensure sound, all-encompassing security.

Implement baseline security for multiple security roles Use the Security Configuration And Analysis snap-in to test a server for compliance with

Select provided templates for use in administering security Recover default security settings Develop a new security template for a specific purpose Name and describe the uses for other native Windows Server 2003 security tools Implement the principle of least privilege using a security template

Network security protocols are used to manage and secure authentication, authoriza tion, confidentiality, integrity, and nonrepudiation. In a Windows Server 2003 network, the major protocols used are Kerberos, New Technology Local Area Network Manager (NTLM), Internet Protocol Security (IPSec), and their various subprotocols. Other network communication protocols support these protocols, and other security settings

11-4

11

support and protect the use of these security protocols. Table 11-1 lists the security par adigms and the protocols that support them.

Table 11-1

Purpose To prove you are who you say you are To determine what you can do on the network after you have authenticated To keep data secret Protocols Kerberos and NTLM (The NT LAN Man ager [LM] protocol is not available by default, but can be configured.) Kerberos and NTLM

Encryption components of Kerberos, NTLM, and IPSec (to secure communications other than authentication) Components of Kerberos, NTLM, and IPSec Kerberos and IPSec

To ensure that the data received is the same data that is sent To determine exactly who sent and received the message

This section concentrates on the use of two snap-ins, Security Templates and Security Configuration And Analysis, to implement the protocols and settings for security. Addi tional sections of this chapter explore how to use other tools to administer, monitor, and secure network protocol security. (IP Security Monitor, Network Monitor, Netcap, Netsh, Kerbtray, and Klist are discussed in the section Monitoring Network Protocol Security. Event logs, IP Security Monitor, and Network Monitor are discussed in the section Troubleshooting Network Protocol Security. ) Still other security tools are available in Windows Server 2003 but not discussed in this chapter.