MCSE Designing Security for a Windows Server 2003 Network: Exam 70-298

R

radio frequency (RF), 314, 315316

RADIUS. see Remote Authentication Dial-In User Service

RAID-1, 510

RAID-5, 510

random password generators, 398

rapid-fail protection, 388, 398

RAS. see Remote Access Servers

RC4 stream cipher, 329

RDA. see Remote Desktop for Administration

RDU (Remote Desktop Users) group , 206

Read permissions, 215

realm trusts, 224225

real-time protection, 630

record layer, 304

recovery. see disaster recovery

recovery agent. see also Data Recovery Agent

importing, 624

overview of, 554555

policy, removing, 579580

Recovery Console

vs. Automated System Recovery/Emergency Management Console, 621

described, 605

for disaster recovery, 599

overview of, 610

securing, 610612

recursion, 298

redirection, 121, 294

redundancy, 620

/refreshpolicy, 94

registry

access control strategy overview, 541

access permissions via Group Policy, 546552

modifications for IAS server performance, 375

objects, permission structure for, 552553

viewing access permissions, 542546

Registry Policy, 73

REGKEYS, 89

remote access

conditions, 655656

of internal resources for clients , 662

overview of, 671, 672673

permissions, 657

plan overview, 651

policy design, 654662

profiles, 657659

selecting method for, 652

selecting protocol for, 652654

SSL/TLS for, 308

Remote Access Account Lockout, 670, 673

Remote Access Policies, 439442, 445

Remote Access Servers (RAS)

template for, 132

configuration overview, 125126

network traffic security, 126

server security, 126

strong authentication, 127

Remote Assistance, 207208, 238

Remote Authentication Dial-In User Service and Internet Authentication Service (RADIUS/IAS)

authentication process, 320321

support for 802.1x authentication, 331

for wireless network infrastructure, 328

WLAN network infrastructure requirement, 322

Remote Authentication Dial-In User Service (RADIUS)

authentication, 369375

described, 400

viability of, 344

IAS and, 662663, 678

networks switches and, 312

for RAS, 127

Remote Desktop for Administration (RDA)

network security management and, 205206

Terminal Services and, 202

for terminal servers, 123124

Remote Desktop Users (RDU) group, 206

Remote Desktop Web Connection, 125

remote management process, 608

removable media, 108

Remove Computer from Docking Station right, 469

renewal of keys, 183184

renewal, EFS certificates, 565566

Replace a Process Level Token right, 469

repudiation , 14

request process, security group, 522

Request Security (Optional) filter action, 270271

Require Security filter action, 271272

Reset account lockout counter after setting, 479

resource groups, 515, 619

Resource Records, DNS, 302303

resources

access to, 516521

group strategy for accessing, 490495

network, providing access to, 662

restore events, 108

Restore Files and Directories right, 469

restores , 595. see also backup

Restricted groups

configuring in Active Directory, 470472

example of use of, 497, 502

overview of, 6971

using, 470

Restricted Groups node, 72

Resultant Set of Policies (RSoP)

for IPSec, 281

using, 912

reviewing result of, 8285

retirement, policies, 526

reversible encryption, 475476

RF (radio frequency), 314, 315316

rights

assigning, 458460

for user accounts, 496

user rights assignments, 463470

RIP. see Routing Information Protocol

risk analysis

for data, 509511

disaster recovery and, 600

implementing, 23

risk management, administrator, 195196

risks

acceptance, 2425

assessment for network infrastructure security, 245

define security policies based on, 245246

to directory services, 457458

of IIS, 381383

rogue wireless networks, 317

role-based authorization, 519

roles. see server roles

root CA

arrangement of, 159

design considerations, 158, 186

in geographical hierarchy, 162163

issuing certificates, 187

network trust hierarchy and, 164, 165, 188

in organizational hierarchy, 163164

PKI design and, 188189

security for, 167169

in three- tier CA, 185

root hints, 298

rootsec.inf template, 6263, 145146

route filters, 418

router, Server 2003, 411423

routes, 415416, 449450

Routing and Remote Access Services (RRAS)

security, 250

certificate-based authentication and, 451452

configuring, 412415

demand dial routing and, 420423

described, 446

DHCP and, 450

routing design between internal networks, 442

Routing Information Protocol (RIP), 416419, 447

routing tables, 414415

routing, demand dial, 420423

RRAS. see Routing and Remote Access Services

RSA, 154

RSoP. see Resultant Set of Policies

rules

configuring IPSec policy, 285

filters for, 272

IPSec, 264265

RunAs function, 223