Customer Reviews

Windows Server 2003 Security Infrastructures: Core Security Features (HP Technologies)

5 star:		(2)
4 star:		(1)
3 star:		(0)
2 star:		(0)
1 star:		(0)

 

 

Jan De Clerq does has done a great job at demystifying and cohesively tying together a host of Microsoft enterprise security technologies that together comprise an organization's security infrastructure. Its packed with valuable technical details and its sits well-respected on my book shelf.

Nice job Jan!

Thanks,
Sanjay
Formerly, MSFT AD Securty PM

I will strongly recommend this book for common understanding Windows security, authentication and PKI basics. For going deeper about let say PKI I will suggest Brian Komar book. But for all-in-one it's a best choice.

This book is very rich and delves deep under the hood into Windows technologies in regards to security. Some warnings for novice readers, there'll walkthroughs of graphical wizards, and this book is not for the light-hearted; it will require some basic understanding of technologies like Kerberos. Though if this is not a problem, this has clear explanations that will illuminate the inner secrets of Windows infrastructure without the need to be a rocket scientist for understanding.

Some parts that I really much appreciated were scenarios about Windows interoperability. In particular, De Clerq detailed methods to integrate LDAP-Kerberos single-sign-on solutions with a Windows domain controller, or with Kerberos cross-realm trust. He should the various freeware solutions, but also delved into Vintella's (now own by Quest) solutions, and later touched on SAMBA's Active Directory integration. Additionally, he details how much in the way of standards Microsoft implements, and what proprietary additions Microsoft adds to Kerberos.

I didn't get a chance to go deep into other chapters, but I briefly looking at them, I know De Cleq will give you a full understanding of the authentication process and also of the authorization process. He has some excellent sections on PKI infrastructure, something I am most interested (and sometimes confused about). I am most eager to really go through this book.

Bottomline... If you are a button clicking administrator, content to be ignorant and collect a paycheck, this book might not be for you... Haha. However, if you want to learn about the deep inner workings of Windows in regards to security infrastructure, this book is a must.