Chapter 7: Increasing Authentication Security

Chapter 7

Increasing Authentication Security

About This Chapter

This chapter discusses how to keep your network as secure as possible while allowing access to network resources for clients that run earlier versions of Microsoft Windows and third-party operating systems such as Apple Macintosh. It also discusses how to keep authentication secure when transiting between domains within the same organization.

You need to understand how to require NTLM version 2 authentication on servers and how to install support for NTLM version 2 on Windows 98, Windows NT, and Apple Macintosh computers.

Before You Begin

Chapter 2, "User Accounts and Security Groups," dealt with authentication on local computers and the Kerberos mechanism for logging on to a domain network after the client initially authenticates with the authentication service on a domain controller. You should be familiar with Chapter 2 before reading this chapter.

To complete the lessons in this chapter, you must have

• A Microsoft Windows 2000 domain controller attached to the network

• A Windows 2000 domain controller for another forest attached to the network

• A Microsoft Windows 98 client computer attached to the network

• A Macintosh client computer attached to the network