1. Home
  2. Server Administration
  3. Securing Windows Server 2003

13.9 Summary

Active Directory is a large, complex component of your network. Many aspects of this book?such as IP Security, certificates, DNS, and authentication?relate to providing security for Active Directory. Combining those technologies with the security suggestions that are laid out in this chapter will provide a reasonably secure environment for Active Directory.

If you take only one thing from this chapter, remember that the primary mechanisms to secure Active Directory include GPOs, delegation, and administrative privileges. If you apply security in these areas, the majority of the work for locking down Active Directory will be complete.



    		Securing Windows Server 2003
    		Preface
    		Chapter 1. Introduction to Windows Server 2003 Security
    		Chapter 2. Basics of Computer Security
    		Chapter 3. Physical Security
    		Chapter 4. File System Security
    		Chapter 5. Group Policy and Security Templates
    		Chapter 6. Running Secure Code
    		Chapter 7. Authentication
    		Chapter 8. IP Security
    		Chapter 9. Certificates and Public Key Infrastructure
    		Chapter 10. Smart Card Technology
    		Chapter 11. DHCP and DNS Security
    		Chapter 12. Internet Information Services Security
    		Chapter 13. Active Directory Security
    		13.1 What Is Active Directory?
    		13.2 Structural Components of Active Directory
    		13.3 Domain Controllers
    		13.4 Default Security Through GPOs
    		13.5 Providing Security for Domains
    		13.6 Providing Security for Forests
    		13.7 Providing Security for Active Directory Objects
    		13.8 Providing Security for Domain Controllers
    		13.9 Summary
    		Chapter 14. Remote Access Security
    		Chapter 15. Auditing and Ongoing Security
    		Appendix A. Sending Secure Email
    		Colophon