Establishing Network Authentication Standards

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Windows Server 2003 allows for interoperability with earlier versions of Windows and other operating systems. Interoperating with other operating systems, however, can negatively impact your network security. It is important, therefore, to establish standards for network authentication to minimize the effect that this interoperability has on your organization’s security. You can do this by restricting LAN Manager authentication and by restricting anonymous access. You must also establish a plan for upgrading Windows NT 4.0 domain controllers to balance the Kerberos authentication load in Windows Server 2003 and Windows 2000 domains.