MCSEGuidetoMicrosoftWindowsXPProfess……6章节.pptVIP

Guide to MCSE 70-270, Second Edition, Enhanced 70-270: MCSE Guide to Microsoft Windows XP Professional Second Edition, Enhanced Chapter 6: Windows XP Security and Access Controls Objectives Describe the Windows XP security model, and the key role of logon authentication Work with access control and customize the logon process Disable the default username Discuss domain security concepts Understand the local computer policy Objectives (continued) Enable and use auditing Encrypt NTFS files, folders, or drives using the Encrypting File System (EFS) Understand and implement Internet security The Windows XP Security Model User must logon with: Valid user ID Password User receives access token Access token String of bits representing user Attached to processes The Windows XP Security Model (continued) Access token Compared with ACL (Access Control List) Domain security Centered on Active Directory Active Directory Centralized database containing: Security Configuration Communication information Manages: Information about domain Resources shared by network Logon Authentication Logon is mandatory Logon process components: Identification Authentication Password authentication typically used Access token attached to shell process Shell Defines environment inside which user executes programs or spawns other processes Default: Windows Explorer Defines desktop, start menu, etc. Resources as Objects Access to individual resources controlled at object level Everything in environment is an object Identified by type Type determines Permitted range of contents Kinds of operations Resources as Objects (continued) Service How object can be manipulated Attributes Named characteristics Access Control Logon process Initiated with Ctrl+Alt+Delete Hardware interrupt cannot be imitated Mandatory logon Restricted user mode Physical logon User profiles Customizing the Logon Process Administrator can alter default process Winlogon process: Produces logon dialog box Controls aut