Summary:
Windows NT/2000 Network Security exposes the underlying security weaknesses in Windows and provides strategies to deal with these issues. This informative guide contains the latest information on Windows security issues including special security risks resulting from heterogeneous computing environments, ready-to-implement solutions and techniques to tighten security Windows NT/2000 systems and networks, and weaknesses of recommended industry security practices. If you are a system or network administrator, application or system programmer, information security specialist, or advanced user, Windows NT/2000 Network Security is an authoritative resource that will help you with multiple security issues. These include planning and implementing network infrastructure to accommodate Windows NT/2000 security-related requirements and capabilities, choosing settings and configurations to achieve your desired level security, and controlling potentially dangerous processes, such as SMB and NetBIOS. In addition, maintain the integrity of the Registry and prepare for security as you migrate to Windows 2000.

Table of Contents:

Introduction
Chapter 1: Introduction and Overview
Chapter 2: The Structure of Windows NT Security
Chapter 3: The Windows NT Network Environment
Chapter 4: Basic Windows NT Security Exposures
Chapter 5: Configuring Windows NT Server for Security
Chapter 6: Maintaining Windows NT Security
Chapter 7: Basic Network Security Measures
Chapter 8: Securing Network Services and Protocols
Chapter 9: Virtual Private Networks
Chapter 10: Workstation Security
Chapter 11: Security Considerations for Windows 2000
Appendix A: Port-Assignment Conventions
Appendix B: RFCs Supported by the Windows NT Implementation of TCP/IP
Appendix C: Significant Security-Related Features of Service Packs 3-6a for Windows NT 4.0
Appendix D: Useful Security-Related Tools from the Windows NT 4.0 Resource Kit
Appendix E: A Script for Securing Windows NT Systems
Appendix F: Manual Clean-Up Procedures for Tightening Security after Script Execution
Index