Amazon.com Review
The team of Microsoft-certified experts who collaborated on this book have done great work.
Configuring Windows 2000 Server Security takes on a single, vital feature of Windows 2000 Server operations and does a fantastic job of explaining its many aspects, both conceptually and practically.
The prose style of this book frequently strays from the elegant, but it expertly documents processes and explains complicated architectures through experience and research. Where it's appropriate to do so, the authors include directions on how to use security services, including Kerberos and the Encrypting File System (EFS).
Most of the coverage examines behind-the-interface operations, relying on flow diagrams and uncluttered conceptual drawings to illustrate processes like smart-card authentication and the Public Key Infrastructure (PKI). Question-and-answer sections at the end of each chapter are particularly strong. The questions are well chosen (a typical one asks about using 128-bit encryption across an international network) with clear, carefully supported answers.
The book's index fails miserably, largely because it seems to exclude topics covered in the Q&A sections. You'll find yourself marking useful pages for later reference. But that's a petty complaint. For administrators who aren't willing to take Windows' word on matters of security and can't get adequate answers from Microsoft's documentation, this book is a fine selection. --David Wall
Topics covered: Information security features of Windows 2000 Server and their relationships to corresponding features in Windows NT 4. Coverage includes Users, Groups, Kerberos, keeping Active Directory secure, use of the Security Configuration Tool Set, the Encrypting File System (EFS), secure Internet connectivity, the IPSec protocols, smart cards, and the Windows 2000 implementation of the Public Key Infrastructure (PKI).
About the Author
Stace Cunningham (CMISS, CCNA, MCSE, CLSE, COS/2E, CLSI, COS/2I, CLSA, MCPS, A+) operates SDC Consulting in Biloxi, MS. He has assisted several clients, including a casino, in the development and implementation of their networks, which range in size from 20 nodes to over 12,000 nodes. Stace has been heavily involved in technology for over 14 years. During that time he has participated as a Technical Contributor for the IIS 3.0 exam, SMS 1.2 exam, Proxy Server 1.0 exam, Exchange Server 5.0 and 5.5 exams, Proxy Server 2.0 exam, IIS 4.0 exam, IEAK exam, and the revised Windows 95 exam. Stace was an active contributor to The SANS Institute booklet "Windows NT Security Step by Step".