## Chapter 4 Summary

Windows NT comes with many security features and capabilities out-of-the-box that make the system quite secure when correctly implemented.

The Security Log in Windows NT allows you to track all log ons, as well as events related to resource usage.

The term policy has several contexts within Windows NT security. Account and password policies affect how and when an account can be used and user policies or computer policies can affect computer configuration when a user logs on to the network.

UNIX and Windows NT levels of access differ. UNIX permissions tend to be "all or nothing," while Windows NT permissions are granted to a specified level.

Windows NT includes support for VPNs created with PPTP. This allows you to create encrypted connections among Windows NT and Windows 95 computers over dial-up or dedicated connections.

The following table compares the similarities and differences of Windows NT and UNIX security systems:

Feature | Windows NT | UNIX
Security auditing | Event Viewer | syslog is enabled by default
Network logon | Object access | /etc/passwd, /etc/group
Security policies | Account and password policies, and user or computer policies | None by default
Levels of access | Customizable permissions | "All or" permissions
Temporary impersonation | Connect As , ResKit su | su command
Authentication protocols | PAP, SPAP, CHAP, DES, MS-CHAP, RC-4, and Kerberos v5 | Kerberos and DES
VPN | PPTP, L2TP | Third party, L2TP, SKIP
Firewalls | Third party, MS Proxy server | Third party, home brew
Internet security | Port filters | TCP Wrapper

©1997 Microsoft Corporation. All rights reserved. Legal Notices.
Last Updated: December 1, 1997