O'Reilly logo

MCSE: Windows 2000 Exams in a Nutshell by Paul Murphy, Michael Moncur

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Designing Basic Security

Operations Masters

Schema master

Acts as the authority for changes to the Active Directory schema (the specification of the object types and properties stored in the Directory). One server per forest acts as the schema master.

Domain naming master

Manages additions, deletions, and changes to the domains contained within the Active Directory forest. One server per forest acts as domain naming master.

Relative ID master

Manages the identifiers used to associate objects with containers and allows objects to be moved between containers. One server per domain acts as relative ID master.

PDC emulator

Emulates a Windows NT 4.0 PDC for compatibility with older systems. One server per domain acts as PDC emulator.

Infrastructure master

Manages associations between users and groups. One server per domain acts as infrastructure master.

Authentication Methods

Clear text
LM and NTLM
Kerberos
Digest authentication
Smart cards
RADIUS
Certificates
SSL

Certificate Authority Roles

Enterprise root CA

If you are using Active Directory, this is the master CA. It issues the certificates for the enterprise subordinate CA servers, so its security must not be compromised. Otherwise, your whole certificate system can be compromised by hijacked or impersonated CA servers. The enterprise CA requires both Active Directory and Windows 2000 DNS.

Standalone root CA

If you’re not using Active Directory, this is the master CA. It issues the certificates for the standalone subordinate CA servers, so its security ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required