Active Directory Tip: Restricting cached credentials

[SearchWin2000.com]

Title: Active Directory Tip

June 02, 2004 Published by  SearchWin2000.com Active Directory Tip Issue Sponsored By: SearchWin2000.com White Papers IN THIS ISSUE: Restricting cached credentials Learning guide: Planning and designing your Active Directory Hiding service administrator accounts from users Ask the expert: How do I 'undelegate' a user group in AD? Got IT job woes? Get advice from the pros SearchWin2000.com White Papers Keep up-to-date on the latest in Windows with the SearchWin2000.com white papers. Read about featured topics such as active directory, security, systems management, .NET and Web services and much more! Click Here. Restricting cached credentials [James Michael Stewart] Windows operating systems, including 2000, XP, and 2003, cache the logon credentials for the last 10 users. This allows for the user to re-logon at a later date even if the domain controller cannot be accessed at the time of logon. While this does represent a fault tolerance to DC downtime and network congestion, it is a poor state of security. Find out what the most secure settings are in this tip. Learning guide: Planning and designing your Active Directory [Marilyn Cohodas] Part one of this guide covers planning and designing your Active Directory. It includes: Active Directory basics, Planning your Active Directory, Active Directory migration and Active Directory deployment Resources. Hiding service administrator accounts from users [James Michael Stewart] Windows Server 2003 automatically protects the essential security descriptors on the service level administrator accounts in the local domain. However, default settings allow normal users (i.e. members of the Authenticated Users group) to see the names of the user accounts that are members of the service administrator groups. Find out how to hide these user accounts in this tip. Ask the expert: How do I 'undelegate' a user group in AD? [Serdar Yegulalp] Dear Serdar, In our Active Domain we have delegated a security group to have the right to add computers to another OU. How do I "undelegate" that user group if the need arises? TOPICS: Got IT job woes? Get advice from the pros Are you an underpaid system admin, a tech specialist at wits end or an IT man wanting your boss' job? Here are tips and advice that can enrich your job or get you the one you want. NEWS: Reporter's notebook: Deconstructing TechEd As workers at the San Diego Convention Center begin dismantling the displays for TechEd today, what will be the key takeaway from this year's signature Microsoft event? Two words: life cycle. TOPICS: Know-IT-All Chapter Quiz: Can you handle the challenge? This week's book excerpt comes from "Microsoft Windows Server 2003 Unleashed, 2nd edition" by Rand Morimoto et al. Would you like to get a free copy? Think you know all there is to know about the registry? Take the new Know-IT-All Chapter Quiz, send us your score and you're in the drawing for a free copy! Download the chapter and take the quiz today! Contact Us Sales For sales inquiries, please contact us at: [EMAIL PROTECTED] Editorial For feedback about any of our articles or to send us your article ideas, please contact us at: [EMAIL PROTECTED] Free E-Newsletters! Select e-newsletters you would like to receive via e-mail! SearchWin2000: Certification Tip Not a Member? We'll activate your membership with your subscription. ABOUT THIS E-NEWSLETTER This e-newsletter is published by SearchWin2000.com, a targeted Web site from TechTarget, the most targeted IT media and events company. Copyright 2004 TechTarget. All rights reserved. To unsubscribe from "Active Directory Tip": Go to unsubscribe: http://searchWin2000.techtarget.com/u?track=NL-23 Please note, unsubscribe requests may take up to 24 hours to process; you may receive additional mailings during that time. A confirmation e-mail will be sent when your request has been successfully processed. Contact Us: SearchWin2000 MemberServices 117 Kendrick Street, Suite 800 Needham, MA 02494