How To Control Access To Data In Windows Server 2003

By Author: Shirley Green
Total Articles: 129
Comment this article

Access to data in Windows Server 2003 is controlled by having a MCSE 2003 robust authentication mechanism, setting permissions on data objects, encrypting files, and protecting data during transport. Previous chapters—Chapter 2, Chapter 3, and Chapter 7—detailed authentication, IPSec Policies, and VPNs, respectively. This chapter 'will explain permissions and the Encrypting File System.
Several basic principles and best practices provide the backdrop for a security designer's work:
While permissions vary depending on the type of data, the way access is granted does not. Once a security designer has a firm understanding of the access control process, she can couple that knowledge with the permission structure for each Windows Server 2003 object and design access control for them.
Permissions should never be granted to user accounts; instead, Windows groups should be used. If permissions are granted to user accounts, it becomes difficult to manage them. Determining what access the user has will be difficult, as will removing that access when an employee leaves ...
... the company.
File encryption is an additional protection, but it must be carefully managed. If users do not understand how to use the encrypting file system, they will possibly either have a false sense of security (and might, for example, leave unencrypted copies of their sensitive files around) or find themselves unable to access files free Network+ study guides that they have encrypted.
To design access control for data in Windows Server 2003, apply these steps:
a.Identify the access control process.
b.Explain Permission Inheritance.
c.Design a group strategy for access control.
d.Design a permission structure for files and folders.
e.Design strategy for encryption and decryption of files and folders.
f.Design a permission structure for registry keys.
g.Design access control for directory services, which includes creating a delegation strategy and designing a permission structure
free A+ exam questions for directory service objects.
h. Design security for backup and recovery.
i. Analyze auditing requirements.