Microsoft Windows Security Resource Kit

Additional Information

• Microsoft Official Curriculum, course 1561: Designing Microsoft Windows 2000 Directory Services Infrastructure (http://www.microsoft.com/traincert/syllabi/1561bfinal.asp)

• Best Practice Active Directory Design for Managing Windows Networks (http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/bpaddsgn.asp)

• Windows 2000 Domain Architecture: Design Alternatives (http://www.microsoft.com/technet/prodtechnol/ad/windows2000/plan/w2kdomar.asp)

• Design Considerations for Delegation of Administration in Active Directory (http://www.microsoft.com/technet/prodtechnol/ad/windows2000/plan/addeladm.asp)

• 315676: How to Delegate Administrative Authority in Windows 2000

• 221577: How to Delegate Authority for Editing a Group Policy Object (GPO)

• 235531: Default Security Concerns in Active Directory Delegation

• 279723: How to Grant Help Desk Personnel the Specific Right to Unlock Locked User Accounts

• 301191: How to Integrate DNS with Existing DNS Infrastructure If Active Directory Is Enabled in Windows 2000

• 274438: Cannot Use Kerberos Trust Relationships Between Two Forests in Windows 2000

• 253831: Remote Administration of Terminal Services by Non-Administrators Accounts

  The seven articles above can be accessed through the Microsoft Knowledge Base. Go to http://support.microsoft.com and enter the article number in the Search The Knowledge Base text box.