What Are The Security Services Of Windows Network Security?

NOTE: REMEMBER EACH SECTION OF THE LAB IS WORTH HALF CREDIT AND LABS THAT COMPLETE ONLY ONE OF THE TWO SECTIONS WILL HAVE MAXIMUM 50% CREDIT FOR THE LAB GRADE.

When you have a single server, users will have to login to their local machines via a local account. Any data that they would need access to on the network will need to be authenticated via a set of credentials on the server itself. The user in this case will be using two different set of credentials to access all of their data. When you move into a directory-based network with multiple servers in different roles, things become very easy for both the users and the administrators. The administrators will need to connect each computer to the domain that way the computer will become trusted and the user accounts will be able to be authenticated by the domain controller. Both the local computer logins as well as access to all of the data on each and every server will be the same and configured from just one location. This makes it easier for the

1. Using least privilege can help protect your data and intellectual property. This the concept of giving users the minimum permissions to perform a task. This can restrict access to certain applications. Sales would not have the same access as the technical services team. Only administrators will have unlimited privileges. Administrator level access should be limited to only 2 users (What Is Principle of Least Privilege (POLP)? Definition from WhatIs.com).

There are several sections to this lab. Find each section and complete the “Preparing for Class” sections.

Sadly, there is no way to alleviate the numerous amounts of threats that haunt networks and computers worldwide. The foundation and framework for choosing and implementing countermeasures against them are very important. A written policy is vital in helping to insure that everyone within the organization understands and behaves in an appropriate manner with regards to the fact that sensitive data and the security of software should be kept safe.

Is used a lot in colleges and schools it provides access to the right user it also manages and develops user’s access to computing resources; every user has to make a username and a password. The admin users can search the directory and access the central and departmental file servers, apps and printers across the network. It also makes sure the IT security is in good strength. Account management lowers the computing costs by reducing the number of servers needed for their department.

Individual users play an important role in any form of institution or organization but concerns are raised about the security. The network administrators clearly lay down a set of rules, regulations and protocols that an individual user has to agree accordingly upon which part of the resources and what class of service that the user can obtain.

In this lab, many more options were explored with Windows servers. The topics covered were Group Policies and Password Settings Objects. Both of these features of Windows Active Directory allow for very granular settings to be set across the network. These include a wide range of settings that one most likely would not even think of. I have personally worked with both Active Directory and Group Policies quite extensively so neither of these were new topics for me to learn. However, I had never worked with Password Setting Objects before so that was a learning experience. All of these features are useful in any enterprise production network and are highly valuable skills to have.

It is a hierarchical infrastructure that allows a network administrator in charge of Microsoft's Active Directory to implement specific configurations for users and computers. Group Policy can also be used to define user, security and networking policies at the machine level.

The sixth domain is the Remote Access Domain. In this domain, the network security applications that is apart of it is Proxies. Similar to LAN-to-WAN domain, proxies help to allow users to connect to server through another server. Remote access allows users to connect to the server remotely and Proxies give a user the opportunity to use a proxy server to do this.

Select one of the three characteristics of information security (CIA) and explain its importance as related to the development of policy, education, OR technology.

- DBA security – Controlling the access on the DB level can also serve as a mechanism to protect sensitive data. In this type, there is always an administrator who controls the process of Account creation, granting access, revoking roles and assigning appropriate security level assignment.

Role based access control is an ideology through which access to systems is restricted based on authority given. It is used by organizations with a relatively large number of employees ranging from five hundred to one thousand and above (Sieunarine & University of Oxford, 2011). This is implemented through the mandatory access control or through the discretionary access control. These are the only two ways through which role based access control can be implemented.

The intent of this security proposal is to ensure the ongoing protection and data security for a government agency's data center. Security and access privileges will be defined at the role and department levels, with added authentication for system administrators and members of the IT staff. Role-based access to this government facility will be tracked continually and reported using real-time log reporting and analysis (Amsel, 1988). This role-based approach to managing security will provide for inclusion of authentication, detection and deterrence in the areas of social engineering, firewalls, Virtual Private Networks (VPNs), authentication, security protocols and vulnerability assessments.

Confidentiality: Access controls help ensure that only authorized subjects can access objects. When unauthorized entities are able to access systems or data, it results in a loss of confidentiality.