MODULE 5

Models and Elements of

Group Policies Access Control
Group Policies are a feature
Methods
of Windows Active Directory, Identification
the database system used to Mandatory Access Control (MAC)
Authentication
manage users and assets in Role--based Access Control (RBAC)
Authorization
Implementing Access
a Windows-based network.
Discretionary Access Control (DAC)

Control, Authentication,
Access Control Lists Access Control
You can think of an ACL (Access Access control is a fundamental
component of data security that
and Account Management
Control List) as a property of an
object that lists what users dictates who’s allowed to access
have what permissions and use the information and
resources.
regarding that object.

Account Management
About maintaining rules,
Authentication Services Authentication
policies, and standards
Account Restriction
An example of time restrictions applied to a user. In this
case, the example is Parental Controls, but user accounts
can be restricted the same way in an enterprise
environment by user account or by Group Policy.

RADIUS Kerberos Process or action of PROVING or SHOWING that relate to accounts

TACACS+ LDAP something to be true, genuine, or valid.
SAML Account Expiration
Domain Password Policy It proposes that this vulnerability can be
reduced by using preset expiration dates for
The domain password policy is user accounts, or setting an account to expire
critical to ensure security and once the associated password has been
Authentication: Authentication: Authentication: compliance in your organization. expired for a specific number of days.
Something You Know Something You Have Something You Are
Password
Tokens Standard Biometrics
Classic Password Account Lockout
Cards Behavioral Biometrics
Attack Methods Domain Password Policy Settings Keeps the account secure by preventing anyone or
Behavior of Psssword Cellphone Cognitive Biometriics anything from guessing the username and password.
Enforce Password Policy
Password Hashing Maximum Password Age
Minimum Password Age
Minimum Password Length Account Lockout Properties
Complexity Requirement Account Lockout Threshold
Store Passwords with Reversible Account Lockout Duration
Encryption Reset Account Lockout After

Created by: Created for:

Diaz, Jaira Mae B. Information Assurance and Security 2
CEIT-37-701A Prof. Joy Salazar