10-17-01


1) PASSWORD POLICY - combine of charcter and number and special charcters to create password
2) LOCKOUT POCICY - Allows users how many times logon with the wrong password before system account lockout.
3) AUDIT POLICY
- Track Events on Machine
4) USER RIGHT POLICY - right for USER to do and not to do with machine
- Permission to the Machine (Users and Groups)
5) SECURITY POLICY - apply to machine
- Security Settings Applied to Machine

1) PASSWORD POLICY
- Minimum length of password

Read Chapter 6
- Enforce Password History
-- Number of passwords user must cycle thru before allowed to use the same again
- Maximum Password Age
-- Number of days user can use password forced to machine
- Maximum Password Age
-- Number of days user must use on a password before allowed to change to a new password
- Complexity - combine of charcters, numbers and special charcters, upper and lower case to create password. The more complex the harder for hacker to hack the password.

2) LOCKOUT POLICY
- Threshold
-- Number of bad attemps logon before account lockout
- Duration
-- How long the account will lockout for
-- 0 = forever
- Reset Counter
-- How long before the threshold counter is reset

3) AUDIT POLICY
- Account logon
-- User logon
- Logon Events
-- Non User Logon Events
- Account management (some user account being lockout, password need to be change or reset ...)
- Object Access
-- Tracks access to resource
---- NTFS
- Policy Change - track any change in policy
- Previllege use
-- track the user right usage ie. shutdown the machine.