Windows Server 2008 安全资源套件：深入ACL与权限管理

需积分: 9 49 浏览量更新于2024-07-21 收藏 9.39MB PDF 举报

《Windows Server 2008 Security Resource Kit》是由Microsoft Press出版的一本专著，专注于Windows Server 2008的安全和访问管理。这本书深入探讨了Windows操作系统中的核心安全机制，特别是Access Control Lists (ACLs) 和权限管理。ACLs在Windows中扮演着关键角色，它们定义了用户、组或系统进程对系统资源的访问权限，确保了系统的安全性和资源的控制。书中详细解释了如何设计和实施有效的访问控制策略，包括用户权限分配、权限层次结构的设置以及权限的授予与撤销。Windows Server 2008的权限模型允许通过细致划分，实现精细粒度的控制，这对于企业级环境中多用户、多角色的协作至关重要。此外，本书还可能涉及Active Directory（AD）的角色，作为Windows域控制器，它在组织内提供了集中化的身份验证、授权和资源管理。书中涵盖了多种Windows技术，如BitLocker用于全盘加密保护数据安全，Forefront系列产品的防火墙和防病毒解决方案，以及Windows PowerShell等自动化工具在安全管理中的应用。对于那些依赖于Microsoft Office套件（如Excel、Outlook、PowerPoint和Visio）的企业，也会有专门章节讨论如何在保证办公效率的同时，确保敏感信息的保密性。对于开发者和IT管理员而言，书中可能会介绍Authenticode签名、DirectX编程中的安全性考虑，以及如何集成Microsoft Security Development Lifecycle (SDL)原则，确保软件产品的可信性和安全性。同时，书中还可能包含对SQL Server的数据库安全配置和MSDN（Microsoft Developer Network）资源的引用，以便读者获取最新的安全实践和最佳做法。《Windows Server 2008 Security Resource Kit》是一本实用的指南，旨在帮助IT专业人员全面理解和提升Windows Server 2008平台的安全防护能力，无论是基础概念的讲解，还是高级策略的实施，都是这本书的核心内容。读者通过阅读此书，可以提升对Windows安全体系的理解，并能够更有效地保护企业网络环境免受威胁。

xvii

Introduction

If you are like us, you are really excited right about now. No, not because we finished this

book, but because the fact that we did means that there is a new operating system to explore!

Even if you are not the type to get excited about such things, you hold in your hands the

comprehensive technical security resource for Windows Server 2008.

Windows Server 2008 is an upgrade to Microsoft’s flagship server operating system.

A significant amount of effort has been devoted to making sure it is not only of high quality,

but also has the appropriate security features to enable safe deployment. This book is meant

as your companion and guide as you explore these features and investigate how you can use

them to provide better services or make your life easier. Along the way, the book also

documents features that have never before been documented for the intended audience: the

IT professional.

This book contains all the technical details you have come to expect from a Resource Kit. It is

put together by 12 world-class experts, each recognized as a leading authority on his or her

particular topic. Among them they have written more than 20 books. However, first and

foremost they are IT professionals.

Overview of the Book

The book has 16 chapters, plus a bonus chapter on the CD. The chapters are divided into the

following three sections.

Part I: Windows Security Fundamentals

■ Chapter 1, “Subjects, Users, and Other Actors” This chapter discusses how users and

other subjects are managed in Windows.

■ Chapter 2, “Authenticators and Authentication Protocols” After a subject is identified,

it must authenticate the identification. This chapter covers how authentication works in

Windows.

■ Chapter 3, “Objects: The Stuff You Want” Users access objects such as files, registry

keys, and so on. That means the objects must be secured. This chapter discussed how

that happens.

■ Chapter 4, “Understanding UAC” Microsoft introduced User Account Control (UAC)

in Windows Vista. If you are primarily a server administrator, you mostly need to

understand UAC to manage your servers properly. However, if you work in any kind of

broader area of IT, you need to know how to use UAC to protect your network. This

chapter tells you how.

xviii Introduction

■ Chapter 5, “Windows Firewall(s)” The primary firewall in Windows is the Windows

Firewall with Advanced Security. This chapter covers how it works in Windows

Server 2008.

■ Chapter 6, “Services” When a process must run regardless of whether a user is logged

on, that process is installed as a service. Services, therefore, represent a significant

attack surface on your computers and it is important that you understand their

security implications.

■ Chapter 7, “Group Policy” When running Windows networks you are doing yourself

a disservice if you do not use Group Policy. Most security modifications we make to

systems are done using Group Policy.

■ Chapter 8, “Auditing” Security is not very useful unless you can use it to prove who did

what. Auditing is a fundamental component of all security. This chapter covers in detail

how auditing works in Windows.

Part II: Implementing Identity and Access (IDA) Control

Using Active Directory

■ Chapter 9, “Designing Active Directory Domain Services for Security” Anyone can create

an Active Directory deployment, but to actually create one that enhances the security of

your network takes skill. This chapter shows you how.

■ Chapter 10, “Implementing Active Directory Certificate Services” Public Key Infrastruc-

tures (PKI) are seen by many as an unnecessary complication. Nothing could be further

from the truth. For many (if not most) environments, they are a necessary complication.

This chapter covers what is new in PKI in Windows Server 2008.

Part III: Common Security Scenarios

■ Chapter 11, “Securing Server Roles” One of the first things you will notice about

Windows Server 2008 is that the old methods for installing applications have been

removed. Instead you get Server Manager, which works on a roles-based metaphor.

In this chapter you will learn how this impacts security, and how to use roles to

protect servers.

■ Chapter 12. “Patch Management” Unfortunately, every server needs updated now and

then. Software, being the most complex thing ever built by mankind, is not perfect.

Patch management is not easy, but if you have the right tools and a good process you can

significantly ease the burden.

■ Chapter 13, “Managing Security Dependencies to Secure Your Network” Every computer

is dependent on something, or someone, for its security. Managing these dependencies

well is probably the most important thing you can do to protect your network. In this

Introduction xix

chapter we discuss dependencies, show you how to do threat modeling on your network,

and introduce you to one of the most valuable security concepts today: server isolation.

■ Chapter 14, “Securing the Branch Office” One of the areas where Windows Server 2008

introduces significant new security features is in branch office scenarios. This chapter

shows you how to take advantage of all of them.

■ Chapter 15, “Small Business Considerations” Windows Server 2008 comes in more

flavors than any other server operating system Microsoft has built. Two of those

are designed specifically to meet the unique security needs of small and medium-sized

businesses. If you run a network in a small business, this chapter is an invaluable

resource.

■ Chapter 16, “Securing Server Applications” The point of most servers is to provide

some application support. While this book cannot possibly talk about every

application that could run on a server, Microsoft ships the IIS 7.0 application platform

with Windows Server 2008. This chapter shows you how to manage security in

that component.

Find Additional Content Online

As new or updated material becomes available that

complements this book, it will be posted online on the Microsoft Press Online Windows Server

and Client Web site. Based on the final build of Windows Server 2008, the type of material you

might find includes updates to book content, articles, links to companion content, errata,

sample chapters, and more. This Web site will be available soon at http://www.microsoft.com/

learning/books/online/serverclient, and will be updated periodically.

Document Conventions

The following conventions are used in this book to highlight special features or usage.

Reader Aids

The following table describes the reader aids used throughout this book to point out

useful details.

Reader Aid Meaning

Note Underscores the importance of a specific concept or highlights a special case

that might not apply to every situation.

Important Calls attention to essential information that should not be disregarded.

Caution Warns you that failure to take or avoid a specified action can cause serious

problems for users, systems, data integrity, and so on.

On the CD Calls attention to a related script, tool, template, or job aid on the companion

CD that helps you perform a task described in the text.

xx Introduction

Sidebars

The following table describes the sidebars used throughout this book to provide added

insight, tips, and advice concerning different Windows Vista features.

Command-Line Examples

The following table describes style conventions used in documenting command-line

examples throughout this book.

Companion CD

In addition to the book itself, you also get a CD with some great tools on it. System

requirements for running the CD are at the back of this book. Included on the CD are:

Elevation Tools

UAC has undoubtedly introduced an additional level of complexity in managing systems.

Undoubtedly this was a long overdue change that implements absolutely necessary changes

in how we run our computers. However, as administrators, we sometimes need to modify files

that only administrators have access to, or need to quickly get to a folder with a command

prompt. This set of tools add some new right-click functionality to Windows Explorer, shown

in Figure I-1. Most notably, right-click any folder, select Elevate Explorer Here and answer the

elevation prompt(s). This will launch a Windows Explorer window running with a full

administrative token at whatever location you chose. You also get the elevate.exe tool, which

elevates any application from a command prompt.

Passgen

Passgen is a tool that enables you to manage passwords on the built-in Administrator account

and service accounts across a network. It is designed to help you ensure that you have unique

Sidebar Meaning

Direct from the Source/Field Contributed by experts at Microsoft or Microsoft Most Valuable

Professionals (MVP) to provide “from the source” and “from the

field” insight into how Windows Vista works, best practices for

managing security, and troubleshooting tips.

How It Works Provides unique glimpses of Windows Server features and how

they work.

Style Meaning

Bold font Used to indicate user input (characters that you type exactly as shown).

Italic font Used to indicate variables for which you need to supply a specific value

(for example file_name can refer to any valid file name).

Monospace font Used for code samples and command-line output.

%SystemRoot% Used for environment variables.

剩余509页未读，继续阅读

softwind80

粉丝: 0
资源: 4

Windows Server 2008 安全资源套件：深入ACL与权限管理

Windows Server 2003 Resource Kit Tools

Windows2003 resource kit tool

Windows server2008搭建http网站

windows server 2003 iis6.0

sql sever 2008 R2 sp2

windows server 企业杀软

windows server 2016 dnssec

如何在Windows server 2019 core中禁用sconfig

sqlserver2008登录

windows server 2003

最新资源