Book details of 'Microsoft Windows Nt 4.0 Security, Audit, and Control (Microsoft Technical Reference)'

Title	Microsoft Windows Nt 4.0 Security, Audit, and Control (Microsoft Technical Reference)
Author(s)	James G. Jumes, Neil F. Cooper, Paula Chamoun, Tood M. Feinman, Todd M. Feinman
ISBN	157231818X
Language	English
Published	January 1999
Publisher	Microsoft Press

---

Back to shelf Computer security
Amazon.com info for Microsoft Windows Nt 4.0 Security, Audit, and Control (Microsoft Technical Reference)

Score:

Vote for this book

The Virtual Bookcase Reviews of 'Microsoft Windows Nt 4.0 Security, Audit, and Control (Microsoft Technical Reference)':

Reviewer Rob Slade wrote:
The primary audience described in the introduction seems to be security professionals. However, system administrators, technology managers, and CIOs are mentioned as well. The attempt at breadth of coverage usually does not bode well in works like these. Chapter one discusses an information security model based upon the business (and other) objectives of the institution in question. While valid as far as it goes, and even possibly helpful when formulating security policy, this by no means provides a structure from which to view either security policy or procedures, let alone implement a complex set of controls. The widget company, beloved of management writers, is described in chapter two. For the purposes of assessing security in real world working environments, this particular widget company seems to be astoundingly simple and homogeneous. Chapter three starts out talking reasonably about security policy, starts to get flaky in risk assessment (I would definitely worry about a .45 chance of an earthquake), and tails off into trivia. Monitoring, in chapter four, looks first at system performance and diagnostics, and then gets into event logging without really going into the concepts. Many areas of physical security are left uncovered in chapter five. Chapter six discusses domains, trust relationships, and remote access permissions. Dialogue boxes for user accounts and groups are listed in chapter seven. There is some mention of the commonly "received wisdom" in regard to these topics, as there is in chapter eight regarding account policies, but nothing very significant. File system, share, and other resource control is covered in chapter nine. Chapter ten is a bit of a grab bag without much focus. The registry is reviewed in chapter eleven. Chapter twelve looks briefly at power supplies and backups. Although it talks about auditing, chapter thirteen is more of a checklist of security features to think about. Appendix A is a bit better in this regard: it lists recommended settings across a number of functions for six different types of systems. There is some discussion of options as the various functions are addressed, so, in a sense, this is a start towards full coverage of NT security. It has a long way to go, though. In addition, the deliberation comes at the cost of a loss of some detail in terms of security implementation. copyright Robert M. Slade, 1999
Add my review for Microsoft Windows Nt 4.0 Security, Audit, and Control (Microsoft Technical Reference)