Microsoft® Windows® Security: Essentials

The Essentials and Beyond

In this chapter, you learned about the three factors of authentication: something you know (such as passwords), something you have (such as smart cards), and something you are (validated through biometrics). You can use any factor individually or combine two or more for multifactor authentication. Password best practices can be enforced with a password policy, and you can discourage people from guessing passwords with an Account Lockout Policy. Most organizations require administrators to use two accounts and use the Run As Administrator capability to launch applications with administrative permissions when needed. Kerberos is the primary network authentication protocol used in Microsoft domains, and it requires that ...