|
Security
The cornerstone of Windows 2000 security is Active Directory.Its support for granular access control,inheritance,and delegation of administrative task gives you the flexibility to secure resources without compromising your network’s purpose[7].Fine-granted access control is not offered in NT 3.x or 4.0.This often torces you to assign permissions that give either too little or too much control[8].Although Active Directory should be a significant piece of Windows 2000 security strategy,it can not deliver complete enterprise security by itself.
安全性
Windows 2000安全性的基石是活动目录。它支持粒度访问控制、继承性和可管理任务的委派,所有的这些都让用户以足够的灵活性去保障资源安全而不造成网络泄密。NT3. x或者NT 4.0并没有提供比较好的访问控制,这迫使你分配的权限不是太多就是太少。虽然,活动目录算是Windows 2000安全策略里的重要部分,但它自身并没有提供完整的企业安全性。 |
|