Index_I

---

I

IAS (Internet Authentication Service), 4-39—4-43

account lockout feature, 4-41

account lockout policies, 1-21—1-22, 3-10

configuring, 4-39

logging considerations, 4-42

protecting with firewalls, 4-42

quarantine control, 4-41—4-42

RADIUS message authenticators, 4-40

remote access, 12-10

security template planning, 3-6—3-7, 13-8—13-14, 13-19

wireless network configuration, 10-21—10-24, 10-31

ICF (Internet Connection Firewall), 8-14

ICMP traffic, blocking, 9-32

identity, 1-7

IEEE 802.1X authentication, 15-41—15-44

Iesacls.inf template, 3-6

Ifmember tool, 2-32

IIS (Internet Information Services), 4-31—4-39

changes since Windows 2000, 4-31—4-32

configuring roles for, 4-32—4-33

configuring server security, 1-32, 13-41

IP address and domain name restrictions, 4-34—4-35

logging considerations, 4-35—4-37

protecting with firewalls, 4-39

SSL encryption, 4-37—4-38, 11-10—11-25, 15-50

subcomponents, 4-33—4-34

Web site permissions, 4-38

IKE (Internet Key Exchange), 8-11—8-13

Certificate Services for IPSec, 9-10

Main Mode, 8-11—8-12, 9-19—9-21

Quick Mode, 8-12—8-13, 9-21—9-23

tracing, to monitor IPSec, 9-28—9-29

IKE Main Mode parameter, 9-21

IKE Quick Mode parameter, 9-21

IMAP, port numbers for, 11-7

IMAP4 protocol, encryption with, 4-44, 11-32

implementing authentication strategy, 1-18—1-31, 16-6—16-12

account lockout guidelines, 1-21—1-22, 3-10

earlier operating systems, 1-24—1-27

environment evaluation, 1-18—1-19

Kerberos ticket guidelines, 1-22—1-23

multifactor authentication, 1-27—1-28

password policy guidelines, 1-19—1-21

implicit permissions (SQL), 4-49

importing security templates into GPOs, 3-19—3-20

incoming connections, remote access, 12-5

Incoming Forest Trust Builders group, 2-25

Index This Resource permission (Web sites), 4-38

inheritance, Group Policy

modifying with WMI filtering, 3-23—3-24, 3-36—3-37

with security groups, 3-21—3-22

standard, 3-20—3-21

inherited permissions, 2-5—2-6

installation

certificates, 7-6, 7-22, 7-24, 7-31—7-35, 7-61—7-70, 11-23

client software, restrictions on, 4-5—4-7

while computers are connected to network, 6-15—6-18

integrated installation (slipstreaming), 6-19—6-24

patches (updates), 5-4, 5-33

patches, managing, 5-1—5-44, 6-3—6-53, 14-1, 14-4—14-13, 14-15—14-33

Windows Installer files, 5-21

integrated installation. See slipstreaming

integrated Windows authentication, 1-33

integrating updates into setup files (slipstreaming), 6-19—6-24

integrity, message, 4-40

Interactive group, 2-30

Internet Authentication Service (IAS), 4-39—4-43

account lockout feature, 4-41

account lockout policies, 1-21—1-22, 3-10

configuring, 4-39

logging considerations, 4-42

protecting with firewalls, 4-42

quarantine control, 4-41—4-42

RADIUS message authenticators, 4-40

remote access, 12-10

security template planning, 3-6—3-7, 13-8—13-14, 13-19

wireless network configuration, 10-21—10-24, 10-31

Internet Connection Firewall (ICF), 8-14

Internet Explorer, locking down, 13-40

Internet Information Services (IIS), 4-31—4-39

changes since Windows 2000, 4-31—4-32

configuring roles for, 4-32—4-33

configuring server security, 13-41. See also anonymous access

IP address and domain name restrictions, 4-34—4-35

logging considerations, 4-35—4-37

protecting with firewalls, 4-39

SSL encryption, 4-37—4-38, 11-10—11-25, 15-50

subcomponents, 4-33—4-34

Web site permissions, 4-38

Internet Information Services Manager, 4-34

Internet Key Exchange (IKE), 8-11—8-13

Certificate Services for IPSec, 9-10

Main Mode, 8-11—8-12, 9-19—9-21

Quick Mode, 8-12—8-13, 9-21—9-23

tracing, to monitor IPSec, 9-28—9-29

Internet Printing, IIS, 4-34

Internet Protocol security. See IPSec protocol suite

Internet zone rules (software restriction policy), 4-6

interoperability (IPSec), troubleshooting, 9-44—9-45

intrusion detection systems, 1-22

Invalid Packets Received parameter, 9-21

IP addresses

IIS restrictions, 4-34—4-35

packet filtering by, 4-18, 8-24—8-30, 9-5

IP Security Monitor Console, 15-32—15-39

IP Security Monitor snap-in, 9-18—9-23, 9-34—9-35

Main Mode negotiation, 9-19—9-21

Quick Mode negotiation, 9-21—9-23

IP Security Policy Wizard, 8-30

IParam registry value, 3-42

IPSEC certificate template, 7-23

IPSec protocol suite, 8-1—8-44, 15-1

Authentication Header protocol, 8-13

configuring, 8-24—8-39, 9-5, 15-20—15-26, 15-36

deploying, 9-3—9-17

ESP protocol, 8-5, 8-13

Exchange Server, 4-45

host-to-host communications, 8-4—8-5

host-to-network communications, 8-6—8-8, 15-51—15-54

infrastructure planning, 8-17—8-23, 15-8

L2TP/IPSec (Layer Two Tunneling Protocol), 12-6—12-8, 12-32

monitoring, 9-18—9-39

negotiating connections, 8-10—8-13

network-to-network communications, 8-8—8-10

overview of, 8-3

SSL vs., 11-4—11-5

troubleshooting, 9-40—9-46, 15-32—15-39

Windows operating system and, 8-13—8-15, 9-43

wireless network security, 10-7—10-9, 15-40—15-49

IPSecCmd utility, 9-9, 9-10, 9-33

IPSecMon utility, 9-33

IPSecPol utility, 9-9—9-10

ISAPI (Internet Server API), 4-32

issuing CAs, 7-10

issuing certificates. See certificates

IUSR_ account, 1-32

---