Front Cover -- Microsoft® Windows Security Fundamentals -- Copyright Page -- Contents -- Foreword by Tony Redmond -- Foreword by Mark Mortimore -- Foreword by Steven Adler -- Preface -- Acknowledgments -- Part I: Introduction -- Chapter 1. The Challenge of Trusted Security Infrastructures -- 1.1 Introduction -- 1.2 Positioning Trusted Security Infrastructures -- 1.3 The Fundamental Role of Trust -- 1.4 Trusted Security Infrastructure Roles -- 1.5 The Next Step: Federation -- 1.6 Identity Management and Trusted Security Infrastructures -- 1.7 Microsoft and the Challenge of Trusted Security Infrastructures -- 1.8 Conclusion -- Chapter 2. Windows Security Authorities and Principals -- 2.1 Security Authorities -- 2.2 Security Principals -- Chapter 3. Windows Trust Relationships -- 3.1 Defining Trust Relationships -- 3.2 Trust Properties, Types, and Features -- 3.3 Restricting Trusts -- 3.4 Working with Trusts -- 3.5 Trust Relationships: Under the Hood -- 3.6 Trusts and Secure Channels -- 3.7 Trusts and Firewalls -- Chapter 4. Aspects of Windows Client Security -- 4.1 Client Security Overview -- 4.2 Least Privilege -- 4.3 Windows XP Service Pack 2 Security Enhancements -- 4.4 Browser Security -- 4.5 Malicious Mobile Code Protection -- 4.6 Leveraging Trusted Platform Module Security Functions -- 4.7 Important Windows Vista and IE 7.0 Client Security Features -- Part II: Authentication -- Chapter 5. Introducing Windows Authentication -- 5.1 Authentication Basics -- 5.2 Windows Authentication Basics -- 5.3 Logon Rights -- 5.4 NTLM-Based Authentication -- 5.5 Anonymous Access -- 5.6 Credential Caching -- 5.7 Limiting Concurrent Logon Sessions -- 5.8 General Authentication Troubleshooting -- 5.9 What's in the Other Authentication Chapters? -- Chapter 6. Kerberos -- 6.1 Introducing Kerberos -- 6.2 Kerberos: The Basic Protocol.

6.3 Logging on to Windows Using Kerberos -- 6.4 Advanced Kerberos Topics -- 6.5 Kerberos Configuration -- 6.6 Kerberos Troubleshooting -- 6.7 Kerberos Interoperability -- Chapter 7. IIS Authentication -- 7.1 Secure by Default in IIS 6.0 -- 7.2 Introducing IIS Authentication -- 7.3 HTTP Authentication -- 7.4 Integrated Windows Authentication -- 7.5 Passport-Based Authentication -- 7.6 Certificate-Based Authentication -- 7.7 IIS Authentication Method Comparison -- Chapter 8. UNIX/Linux and Windows Authentication Integration -- 8.1 Comparing Windows and UNIX/Linux Authentication -- 8.2 Interoperability Enabling Technologies -- 8.3 UNIX/Linux Security-Related Concepts -- 8.4 Windows and UNIX/Linux Account Management and Authentication Integration Approaches -- 8.5 Summary -- Chapter 9. Single Sign-On -- 9.1 SSO: Pros and Cons -- 9.2 Web versus Enterprise SSO -- 9.3 SSO Architectures -- 9.4 Extending SSO -- 9.5 Microsoft SSO Technologies -- 9.6 Conclusion -- Part III: Authorization -- Chapter 10. Windows Server 2003 Authorization -- 10.1 Authorization Basics -- 10.2 The Windows Authorization Model -- 10.3 Authorization Intermediaries -- 10.4 Windows 2000 Authorization Changes -- 10.5 Windows Server 2003 Authorization Changes -- 10.6 Authorization Tools -- Chapter 11. Active Directory Delegation -- 11.1 Introduction -- 11.2 General AD Delegation Guidelines -- 11.3 Setting up Administrative Delegation -- 11.4 Hiding Objects in AD -- 11.5 Third-Party AD Delegation Tools -- Index.