Unit OS7: Windows Security Components and Concepts

More documents

Recommendations

Info

8 LSASS Components Active Directory A directory service that contains a database that stores information about objects in a domain A domain is a collection of computers and their associated security groups that are managed as a single entity The Active Directory server, implemented as a service, \Windows\System32\Ntdsa.dll, that runs in the Lsass process Authentication packages DLLs that run in the context of the Lsass process and that implement Windows authentication policy: LanMan: \Windows\System32\Msvc1_0.dll Kerberos: \Windows\System32\Kerberos.dll Negotiate: uses LanMan or Kerberos, depending on which is most appropriate
9 LSASS Components Net Logon service (Netlogon) A Windows service (\Windows\System32\Netlogon.dll) that runs inside Lsass and responds to Microsoft LAN Manager 2 Windows NT (pre-Windows 2000) network logon requests Authentication is handled as local logons are, by sending them to Lsass for verification Netlogon also has a locator service built into it for locating domain controllers WinLogon MSGINA LSA Policy NetLogon LSA Server LSASS MSVC1_0.dl Kerberos.dll Active Directory SAM Server SAM Event Logger Active Directory
Page 1 and 2: Windows Security
Page 3 and 4: 3 Windows Security Mechanisms Permi
Page 5 and 6: User Mode Security Components WinLo
Page 7: 7 LSASS Components SAM Service A se
Page 11 and 12: 11 Security Reference Monitor Perfo
Page 13 and 14: 13 Protecting Objects Access to an
Page 15 and 16: 15 Tokens The main components of a
Page 17 and 18: 17 Security Descriptors Descriptors
Page 19 and 20: 19 Discretionary Access Control Lis
Page 21 and 22: 21 Example: Access granted Security
Page 23 and 24: 23 Access Check Quiz Token Mark Aut
Page 25 and 26: 25 Access Special Cases An object
Page 27 and 28: 27 Controllable Inheritance In NT 4
Page 29 and 30: Impersonation Lets an application a
Page 31 and 32: 31 Privileges Specify which system
Page 33 and 34: 33 What Makes Logon Secure Before a
Page 35 and 36: 35 Logon LSASS creates a token for
Page 37 and 38: 37 Remote Logon - Active Directory
Page 39 and 40: 39 Cross-platform Strategy Common K
Page 41 and 42: 41 Kerberos principles Kerberos req
Page 43 and 44: 43 Tickets and Authentication info
Page 45 and 46: 45 Ticket Characteristics KDC retur
Page 47 and 48: 47 Further Reading Mark E. Russinov

Unit OS7: Windows Security Components and Concepts

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?