Microsoft® Windows® 2000 Security Handbook

Summary

Now you know a lot about security in RPC, COM, and COM+. You can administer the security in a distributed environment and develop secure distributed applications. In conclusion, I remind you of some rules you should follow.

The first rule is that you should never write code if you do not have a clear understanding of what the end user demands and expects from your product.

Once you understand the nature of the product, don't rush into writing the code. Divide the functionality and data into parts that are loosely coupled (independent from the internal behavior of each other) in the sense of security.

Think twice, cut once, and do not store all your eggs in one basket. If you are writing the Super-Universal Total Banking Control System, ...