Windows Server® 2008 Active Directory® Resource Kit

Chapter 8. Active Directory Domain Services Security

In this chapter:
AD DS Security Basics
Kerberos Security
NTLM Authentication
Implementing Security for Domain Controllers
Designing Secure Administrative Practices
Summary
Best Practices
Additional Resources

One of the primary reasons for deploying a directory service like Active Directory Domain Services (AD DS) is to provide security on the corporate network. Every company stores business-critical information on file servers on the network. E-mail has become one of the primary means for exchanging business information. Intranet or Internet sites may contain confidential information, and access to the sites may need to be restricted to specific users. Managing secure access to these types ...