Securing Windows 2000
¨Windows 2000 Security Configuration Tools GUI
¨secedit command-line
tool
¨\%systemroot%\security\templates contains nine templates to set
system security to highly secure, secure
or basic
¨3 security groups
–Domain Local (access restricted to resources within same local domain)
–Global (allows resources in one domain to be accessed by users from another domain)
–Universal (can contain users and groups from any domain in any forest)