Microsoft's Active Directory is a system that keeps information about network components, as well as allowing clients to find objects within its namespace (a location where a network component can be found).
Security Features
As Active Directory plays a critical role in future networking for Windows, it is imperative that administrators must be able to guard their directory from attackers and users, while being able to still assign tasks to other admins when required. The Active Directory Security Model aims to do just that. Below are a few of its methods.
Delegation of Control Wizard
The above is what the Delegation of Control Wizard looks like. It permits a high level of control to the administrator. This allows him to grant both individual and groups of users different levels of permissions for objects and their attributes. Using this Wizard, an Administrator can add or hide attributes to various groups and/or users. Another function is delegated administration, where an administrator is administrates certain areas, instead of a single person having access to all permissions.
Auditing
another feature of the Active Directory is its ability to be audited. This is a very useful way to determine if permissions are set correctly and to monitor for any unauthorized access attempts, and more importantly, check for success or failure to access.
References
http://technet.microsoft.com/en-us/library/bb742424.aspx
No comments:
Post a Comment