Summary

Active Directory provides a rich security framework to meet the security needs of most organizations. As discussed in this chapter, the most difficult aspect of designing a security strategy for Active Directory and Windows 2000 is not identifying what can be done, but rather which security tool to use to meet your security needs. Kerberos and PKI address the need to secure access to a computing infrastructure, whereas IPSec maintains the integrity and security of data that transits that infrastructure.