Security in the Enterprise Environment

The Microsoft approach to security is based on six fundamental principles:

authentication
Identifies the user, and the all-important single-logon automatically promulgates this identity to all local and remote services.
access control
Restricts access to data based on that identity.
cryptography
Protects the privacy and integrity of data, especially when in transit across a network.
firewalls
Restrict traffic between your LAN and an external network, such as the Internet.
system integrity
Ensures the underlying security software cannot be tampered with.
auditing
Records security events.