Microsoft Windows Security Fundamentals: For Windows 2003 SP1 and R2

This is the first of two books serving as an expanded and up-dated version of Windows Server 2003 Security Infrastructures for Windows 2003 Server R2 and SP1 & SP2. The authors choose to encompass this material within two books in order to illustrate the intricacies of the different paths used to secure MS Windows server networks.

Since its release in 2003 the Microsoft Exchange server has had two important updates, SP1 and SP2. SP1, allows users to increase their security, reliability and simplify the administration of the program. Within SP1, Microsoft has implemented R2 which improves identity and access management across security-related boundaries. R2 also improves branch office server management and increases the efficiency of storage setup and management. The second update, SP2 minimizes spam, pop-ups and unwanted downloads. These two updated have added an enormous amount of programming security to the server software.

* Covers all SP1 and SP2 updates
* Details strategies for patch management
* Provides key techniques to maintain security application upgrades and updates

Foreword
Preface
Chapter 1: The Challenge of Trusted Security Infrastructures

Chapter 2: Windows Security Authorities and Principals

Chapter 3: Trust Relationships
2 Authentication

Chapter 4: Introducing Windows Authentication

Chapter 5: Kerberos

Chapter 6: IIS Authentication

Chapter 7: Unix Authentication Integration

Chapter 8: Single Sign-on

Chapter 9: Introducing Windows Authorization

Chapter 10: Active Directory Authorization

Chapter 11: Active Directory Delegation

Chapter 12: Malicious Mobile Code Protection

Chapter 13: Rights Management Services

Chapter 14: Introducing Microsoft Identity Management

Chapter 15: Identity Management Repositories

Chapter 16: AD Federation Services

Chapter 17: Introducing Windows Public Key Infrastructure

Chapter 18: Windows PKI Trust

Chapter 19: The Certificate Lifecycle

Chapter 20: Building a Windows Server 2003 Public Key Infrastructure

Chapter 21: PKI-enabled applications

Chapter 22: Security Policy Management

Chapter 23: Security Patch Management

Chapter 24: Security-related Auditing

Chapter 25: Active Directory Disaster Recovery