Windows Server 2003 Security Infrastructures

Jan De Clercq

AMSTERDAM BOSTON HEIDELBERG LONDON NEW YORK OXFORD PARIS SAN DIEGO SAN FRANCISCO SINGAPORE SYDNEY TOKYO

Digital Press is an imprint of Elsevier

Digital Press is an imprint of Elsevier 200 Wheeler Road, Burlington, MA 01803, USA Linacre House, Jordan Hill, Oxford OX2 8DP, UK

Copyright 2004, Elsevier Inc. All rights reserved.

No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, or otherwise, without the prior written permission of the publisher.

Permissions may be sought directly from Elsevier’s Science & Technology Rights Department in Oxford, UK: phone: [phone], fax: [phone], e-mail: [e-mail]. You may also complete your request on-line via the Elsevier homepage (http://elsevier.com), by selecting “Customer Support” and then “Obtaining Permissions.”

Recognizing the importance of preserving what has been written, Elsevier prints its books on acid-free paper whenever possible.

Library of Congress Cataloging-in-Publication Data

A catalog record for this book is available from the Library of Congress

British Library Cataloguing-in-Publication Data

A catalog record for this book is available from the British Library.

ISBN: 1-55558-283-4

For information on all Digital Press publications visit our website at www.digitalpress.com and www.bh.com/digitalpress

Printed in the United States of America

To my wife Katrien, my son Johannes, and my daughter Elise for the hours I could not spend with them, and for their continuous support and loving care while writing this book.

Acknowledgments

I would like to thank the following people for helping me create this book:

The technical reviewers: David Cross (Microsoft), Roland Schoenauen (Banque G n rale du Luxembourg), Kevin Laahs (HP), Guido Grillenmeier (HP), Alain Lissoir (HP), Janusz Gebusia (HP), and Olivier Blaise (HP).

The drivers on the Digital Press side: Theron R. Shreve and Pam Chester-for keeping me rolling in hard times and Alan Rose for his incredible patience during the editing of this book.

The HP Windows Server 2003 Academy team: Guido Grillenmeier, Aric Bernard, Jeff Dunkelberger, and Alain Lissoir.

Tony Redmond for his mentorship and leadership, for his support in bootstrapping this book project, and for his efforts in getting the Windows Server 2003 Academy running.

The Microsoft-focused members of HP’s Technology Leadership Group: Donald Livengood, Kieran McCorry, Aric Bernard, Kevin Laahs, Emer McKenna, Pierre Bijaoui, Dung Hoang Khac, Daragh Morrissey, Veli-Matti Vanamo, John Rhoton, and Todd Rooke.

Compaq’s technical community of consultants, who are always willing to learn and share. Special thanks go to Ian Burgess, Gary Olsen, Ken Hendel, Joe Palermo, Henrik Damslund, Jeffrey Honeyman, Dirk De Bock, Marc Van Hooste, Els Thonnon, Rudy Schockaert, Kris Bosmans, Herman De Vloed, Susan McDonald, Vincent D’Haene, Eric Bidonnet, Martin Boller, Wayne Laflamme, Scott Hebner, Patrick Salmon, Patrick Lownds, Ebbe Jonsson, Patrick A. Dant, and Didier Lalli.

The following Microsoft people for their technical advice: Andreas Luther, Markus Vilcinskas, David Cross, Dave Mowers, Ronny Bjones, Marie Maxwell, Tony deFreitas, Mark Rankin, Jerry Cochran, Olivier d’Hose, Mark Mortimore, Fred Baumhardt, Kyle Young, John Brezak, J. K. Jaganathan, Matt Hur, Sanjay Tandon, Eric Fitzgerald, Praerit Garg, Kirk Soluk, and Martin Hall.

My parents, my wife’s parents, and the whole family (especially my little nieces and nephews, Johanna, Lucas, Charlotte, Clara, Astrid, Kato, and Anton), for the time I could not spend with them, for their interest in my writing this book, and for being a great family!