Active Directory Tip: Enforcing SID filtering over external trusts

[SearchWin2000.com]

Title: Active Directory Tip

August 24, 2004 Published by  SearchWin2000.com Active Directory Tip NEWS     TOPICS     ASK THE EXPERTS     TIPS     WEBCASTS     WHITE PAPERS     Issue Sponsored By:   > Quest Software IN THIS ISSUE:   >  Enforcing SID filtering over external trusts   >  Applications and administrator accounts   >  Ask the Expert: Is a pristine forest a good idea?   >  Best practices for upgrading NT domains to Windows 2000/2003 Active Directory domains   >  Win an iRiver iMP 450 SlimX CD/MP3 player! Enforcing SID filtering over external trusts [James Michael Stewart] Security identifier (SID) filtering is the default process by which a domain controller automatically prevents SIDs from any domain other than the specific trusted domain pair from being exchanged over the external trust link. This tip explains how to make sure SID filtering is enabled.   NEW ! Active Directory Security eBook by Robert Bragg Much has been written about how to use Active Directory to centrally manage and secure your information systems. But how do you secure Active Directory itself? In this eBook, Roberta Bragg goes beyond the basics with expert guidance on how to secure your AD infrastructure. Get a free assessment checklist in this 5-lesson eBook format today.   Applications and administrator accounts [James Michael Stewart] When a new system joins a domain, the domain administrators group is added to the local administrators group on that system automatically. This ensures that domain administrators have full access to the newly connected system. Unfortunately, this also means that the system is vulnerable to high-level malicious code attacks. Ask the Expert: Is a pristine forest a good idea? [Paul Hinsberg] Dear Paul, I'm upgrading/migrating from Win2000 to Win2003 and retiring all old servers in the process. I don't like the forest name and domain name of our Win2000 AD and would like to make the internal and external DNS namespace the same. I would like to bring up the new servers in a pristine forest and move user and computer accounts over. Is this a good idea? Can you recommend a good tool for moving accounts and users from one forest to another? Best practices for upgrading NT domains to Windows 2000/2003 Active Directory domains [SearchWin2000.com] Planning is essential for the simple task of upgrading from an NT domain to an AD domain. In this Expert IT Briefing, Braincore.net founder Derek Melber outlines key issues to consider before, during, and after the upgrade. FEATURED TOPIC:  IT Career Success: 10 tips in 10 minutes These 10 tips will help you stay at the top of your class, reach for a bigger paycheck or a promotion, and stay out of the unemployment line. BERNIE KLINDER OPINION:  Shark attack in the data center...not likely Companies spend an enormous amount of time and resources defending against a handful of overhyped, but statistically improbable "sharks," while the more likely threats slip by unnoticed. AUGUST TIP CONTEST:  Win an iRiver iMP 450 SlimX CD/MP3 player! August is just about over -- did you submit a tip yet? Don't worry, there's still time to send us your Windows-related IT tip. Submit a tip today and you could win an iRiver iMP 450 SlimX CD/MP3 player! Contact Us Sales For sales inquiries, please contact us at: [EMAIL PROTECTED] Editorial For feedback about any of our articles or to send us your article ideas, please contact us at: [EMAIL PROTECTED] Free E-Newsletters! Select e-newsletters you would like to receive via e-mail! SearchWin2000: SQL Server Tip SearchWin2000: Security Tip Not a Member? We'll activate your membership with your subscription. ABOUT THIS E-NEWSLETTER This e-newsletter is published by SearchWin2000.com, a targeted Web site from TechTarget, the most targeted IT media and events company. Copyright 2004 TechTarget. All rights reserved. To unsubscribe from "Active Directory Tip": Go to unsubscribe: http://searchWin2000.techtarget.com/u?track=NL-23 Please note, unsubscribe requests may take up to 24 hours to process; you may receive additional mailings during that time. A confirmation e-mail will be sent when your request has been successfully processed. Contact Us: SearchWin2000 Member Services 117 Kendrick Street, Suite 800 Needham, MA 02494