Customer Reviews

Windows NT/2000 Network Security (Circle Series)

5 star:		(5)
4 star:		(3)
3 star:		(0)
2 star:		(0)
1 star:		(0)

 

 

WINDOWS NT/2000
Network Security
AUTHOR: E. Eugene Schultz
PUBLISHER: New Riders
REVIEWED BY: Barbara Rhoades

BOOK REVIEW: This 400+ page book should not give the reader eyestrain, as the font is a fairly readable size. Windows NT/2000, Network Security provides an overview of Windows NT, the structure of Windows NT Security, its environment and security exposures plus configuring and maintaining security as well as other types of security and how to handle them.

Each Chapter ends with a Case Study, a Conclusion, and a Checklist for System Administrators. There are six Appendixes, a 24 page Index, a 9 page Content list and some graphical examples of the reading material.

Anyone responsible for security of their company's computers should add this book to his/her library.

Gene's writings are clear and concise. I highly recommend this to anyone in the security field; either from an administrative position, or from an education position. As Windows 2000 is becoming more prevalent in today's business arena, the weaknesses and vulnerabilities are more obvious and awareness becomes the utmost concern. Gene helps the reader understand where the greatest exposure is, and what to do to keep everything "tight." Don't just add this to your collection, make it a workbook.

All right folks, here is a single volume that covers both Windows NT and Windows 2000 security, host and network. I've been working on Windows NT 4.0 security tasks since it came out of BETA. Dr. Schultz has addressed specifics I haven't seen addressed anywhere in a single reference before. I thought I was an expert. :)

Please note that the author isn't an absolute fan of these two operating systems. He calls it as he sees it. This is good for getting a comprehensive point of view, but if you are a Windows NT/2000 fan with thin skin, you may get your feelings hurt. A must read.

This is an excellent reference for either today's NT sysadmin concerned about security or the seasoned security profressional looking for a compact NT reference for his or her shelf. Well organized and easy to read, this is the book I wished I had available when designing our NT4 deployment.

The Windows 2000 section is on the light but many of the same points the book discusses about NT4 are easily leveraged to Windows 2000.

All in all, a solid reference.

This is a gem of a book, especially if you like technical information and understanding the architecture of a complex system and one as ubiquitous as NT. It is full of useful information, which I "wanted to know but was always afraid to ask", and the use of a variety of fonts in the text is very effective. I managed to read the book in one sitting! The combination of NT/2000 Security with Network Security in one book is a great idea and uniquely valuable to any information security consultant or practitioner. Gene's treatment of the subject is comprehensive and lucid. Each aspect of NT/2000 security is explained in a refreshing manner, that even those who know the subject well will probably find their knowledge replenished after reading the book. Those who have a UNIX mindset will also understand where Gene is coming from. There are very few good books on NT that manages to do this in only 375 pages. The only thing missing are the humourous "ditties" about security that Gene is so good at. But for that, you will have to attend his seminars at SANS or hear him speak at a security conference, wherever in the world you happen to be.

Looking into Gene's treatise on Winnt/Win2K security issues provides a solid and comprehensive overview on the numerous and multidimensional qualities of protecting one's network whether internet or intranet. Considering myself more of a student than any kink of expert or specialist, I was very appreciative of the detail and well explained approach to a concept that presupposes an advanced understanding of networking in general and specifically as it relates to Windows' Operating Systems. Of course Gene's discussions on Win2K are not as comprehensive as some may wish, partially because this book came out within months of the final release of Win2K. Understanding what preceded it and what will be applicable for at least the next few years (or longer) would be essential especially for anyone entering this area of study.

Since lack of knowledge about NT/2K security is possibly the largest general problem in the security space right now, this book couldn't have come at a better time. Schultz cuts to the chase on where the problems lie, and how to use both third party and built-in NT/2K security facilities to the best advantage.

I was particularly pleased at the absence of jingoism and OS bashing. The book is faithful to the goal of providing the reader with fundamental security information, implementation concerns and the (all-too-often omitted) how-to information necessary to get the job done.

A lot 'wanna-be' security seminar speakers will be picking up this book to beef up their courses, so for a fraction of the cost of the seminar it is worth getting the information first hand.

- Jon McCown

This book is incredibly useful if you need to understand how to secure a Windows NT and 2000 environment. System administrators and security personnel will especially benefit from reading the book and having it available as a handy reference on the shelf. I learned a lot from the book and have referred to it numerous times since. The book is clearly written and offers real-world knowledge for deploying, configuring, and maintaining Windows systems.

It focuses on practical information, not just theory. The book really covers a lot of stuff, from security architecture to vulnerabilities to configuration, in an engaging manner.