Summary Authentication is the process of proving you are who you say you are. In Windows Server 2003, some default settings are stronger than in previous versions of the OS. However, it is still possible to strengthen authentication and ensure that the process is attack-resistant. Numerous default settings fulfill the goal of "secure by design," including the elimination of the use of the LM protocol for authentication, the default use of the Kerberos protocol for network authentication between Windows 2000, Windows XP Professional, and Windows Server 2003 computers, the availability of constrained delegation and Protocol transition, and more secure default settings on Security Options in Group Policy. In addition, tools that ease security configuration abound.But default settings and the availability of more secure processes will not raise the security bar in your network if you do not understand and use them, increase security by configuring a strong Password Policy and Account Lockout policy, and train users in security practices. |