Windows 2000 Distributed Security has many new features to simplify domain
administration, improve performance, and integrate Internet security technology
based on public-key cryptography. The highlights of the Windows 2000 Distributed
Security Services include Integration with Windows 2000 Active Directory
services to provide scalable, flexible account management for large domains with
fine-grain access control and delegation of administration; Kerberos version 5
authentication protocol, which is implemented as the default protocol for
network authentication; strong authentication using public-key certificates,
secure channels based on Secure Sockets Layer (SSL) 3.0, and CryptoAPI to
deliver industry-standard protocols for data integrity and privacy across public
networks.
Learn more about Windows 2000 Security Services, including security management using the Microsoft Security Configuration Tool Set, support for IP Security, the Encrypting File System, Public Key Infrastructure, smart cards, and Kerberos.