E-book details

Learning Microsoft Windows Server 2012 Dynamic Access Control. When you know Dynamic Access Control, you know how to take command of your organization's data for security and control. This book is a practical tutorial that will make you proficient in the main functions and extensions

Learning Microsoft Windows Server 2012 Dynamic Access Control. When you know Dynamic Access Control, you know how to take command of your organization's data for security and control. This book is a practical tutorial that will make you proficient in the main functions and extensions

Jochen Nickel

Ebook
Identifying and classifying information inside a company is one of the most important prerequisites for securing the sensitive information of various business units. Windows Server 2012 Dynamic Access Control helps you not only to classify information, but it also gives you the opportunity and the functionality to provide a safe-net policy across your file servers, showing you some helpful ways of auditing and access denied assistance to improve usability.

Understanding the architecture, the design, and implementing the solution, to troubleshooting will be covered in a practical and easy-to-read manner. This book is packed with project-based examples with plenty of information about the architecture, functionality, and extensions of Dynamic Access Control to help you excel in real-life projects. The book guides you through all the stages of a successful implementation of Dynamic Access Control.

Microsoft Windows Server 2012 Dynamic Access Control will teach you everything you need to know to create your own projects, and is an essential resource for reviewing or extending already existing implementations.

The book initially takes you through the task of understanding all of the functionality and extensions with ideas and overviews to help guide you in the decision process. The whole architecture will be explained in the main building blocks of Dynamic Access control. You will have a strong foundation and understanding of the claims model and Kerberos. Classifying information, the hardest part of the prerequisites to fulfil, is also covered in depth. You will also spend time understanding conditional expressions, and the method used to deploy them across your file server infrastructure. A special chapter is included for handling the data quality and the integration in other systems and strategies. Last, but not least, to get your solution up and running you will learn how to troubleshoot a Dynamic Access Control solution.
  • Learning Microsoft Windows Server 2012 Dynamic Access Control
    • Table of Contents
    • Learning Microsoft Windows Server 2012 Dynamic Access Control
    • Credits
    • About the Author
    • About the Reviewers
    • www.PacktPub.com
      • Support files, eBooks, discount offers and more
        • Why Subscribe?
        • Free Access for Packt account holders
        • Instant Updates on New Packt Books
    • Preface
      • What this book covers
      • What you need for this book
      • Who this book is for
      • Conventions
      • Reader feedback
      • Customer support
        • Errata
        • Piracy
        • Questions
    • 1. Getting in Touch with Dynamic Access Control
      • Business needs, purpose, and benefits
      • Inside the architecture of DAC
        • Building blocks
          • Infrastructure requirements
          • User and device claims
          • Expression-based access rules
          • Classification enhancements
          • Central Access and Audit policies
          • Access-denied assistance
      • Building your smart test lab
      • Configuring Dynamic Access Control
      • Summary
    • 2. Understanding the Claims-based Access Model
      • Understanding claims
      • Claims support in Windows 8/2012 and newer
        • Kerberos authentication enhancements
      • Kerberos Armoring and Compound Authentication
        • Kerberos Armoring
        • Compound Authentication
      • Managing Claims and Resource properties
        • Naming conventions
        • Authoritative system and data validation
        • Administrative delegation
        • Resource properties
      • Using Claim Transformation and Filtering
      • Groups or DAC, lets extend our first solution
      • Summary
    • 3. Classification and the File Classification Infrastructure
      • Map the business and security requirements
      • Different types and methods for tagging and classifying information
      • Manual Classification
      • Using the Windows File Classification Infrastructure
      • Data Classification Toolkit 2012
      • The Data Classification Toolkit wizard
        • The Data Classification Toolkit Claims wizard
      • Designing and configuring classifications
      • Summary
    • 4. Access Control in Action
      • Defining expression-based Access policies
      • Deploying Central Access Policies
        • Protecting the legal department's information with Central Access Policies
      • Identifying a Group Policy and registry settings
      • Configuring FCI and Central Access Policies
      • Building a staging environment using proposed permissions
      • Applying Central Access Policies
      • Access Denied Remediation
        • Understanding the ADR process
        • ADR a step-by-step guide
      • Summary
    • 5. Auditing a DAC Solution
      • Auditing with conditional expressions
      • Claims-based Global Object Access Auditing
        • Monitoring your Dynamic Access Control scenarios
      • Configuring an effective auditing solution
      • Policy considerations
      • Extending the solution with System Center
      • Summary
    • 6. Integrating Rights Management Protection
      • Windows 2012 AD RMS
      • Installing Rights Management Services
      • Rights Protected Folder
      • Classification-based encryption
      • Protecting your information with a combination
        • The rights management template
        • Encryption rule
        • Information access
        • Building the RPF example in your environment
        • File retention
        • AD RMS in a SAP environment
      • Summary
    • 7. Extending the DAC Base Solution
      • Keeping Active Directory attributes up-to-date
      • Third-party tools for Dynamic Access Control
        • Classification
        • Central Access Policy
        • RMS Protection
        • Auditing
        • Using DAC in SharePoint
      • BYOD using Dynamic Access Control
      • Summary
    • 8. Automating the Solution
      • Identifying the complete solution
      • How other Microsoft products can assist you
      • Advanced architectures for Information Protection
      • Summary
    • 9. Troubleshooting
      • Common misconfigurations
      • General troubleshooting
        • Domain Controller count
        • Data quality of Active Directory attributes
        • Checking the user and device claims
        • Domain connectivity
        • Advanced Security Editor
          • The order of entries in the Permissions tab
          • The Central Policy tab
        • FCI - resource conditions and resource properties
        • Access Control Lists
      • Advanced troubleshooting
        • Domain function level
        • Active Directory trust
        • Claim Transformation Policy (CTP)
      • Summary
    • Index
  • Title: Learning Microsoft Windows Server 2012 Dynamic Access Control. When you know Dynamic Access Control, you know how to take command of your organization's data for security and control. This book is a practical tutorial that will make you proficient in the main functions and extensions
  • Author: Jochen Nickel
  • Original title: Learning Microsoft Windows Server 2012 Dynamic Access Control. When you know Dynamic Access Control, you know how to take command of your organization's data for security and control. This book is a practical tutorial that will make you proficient in the main functions and extensions.
  • ISBN: 9781782178194, 9781782178194
  • Date of issue: 2013-12-26
  • Format: Ebook
  • Item ID: e_3bbb
  • Publisher: Packt Publishing