Chapter 2 - Network Security and Domain Planning

Network security refers to the protection of all components — hardware, software, and stored data — of a computer network from damage, theft, and unauthorized use. A computer security plan that is well thought out, implemented, and monitored makes authorized use of network computers easy and unauthorized use or accidental damage difficult or impossible.

Microsoft included security as part of the initial design specifications for Windows NT, and it is pervasive in the operating system. The security model includes components to control who accesses which objects (such as files and shared printers), which action an individual user can take on an object (such as write access to a file), and which events are audited.

Security over a Windows NT network incorporates domains and trust relationships to provide the most secure networking operating system available.

This chapter provides:

• An overview of the Windows NT security model and architecture.
• A description of how the features of the security model control access to resources.
• An overview of auditing security events.
• A description of how domains work to implement security over the network.
• Considerations for planning your domain structure, including a description of the Microsoft domain model.
• Troubleshooting.

This chapter presumes a good understanding of Windows NT domains. For background information about domains, see "Managing Windows NT Server Domains" in the Microsoft Windows NT Server 4.0 Concepts and Planning Guide.