After completing Windows 2000 Security Design MCSE 70-220: Using Native Windows 2000 Authentication, the user should be able to:

	Describe the security model provided by Windows 2000
	Describe Microsoft's implementation of the Kerberos standard
	Implement and troubleshoot Kerberos authentication on a Windows 2000 network
	Describe the requirements for using Kerberos authentication in mixed networks

Kerberos Authentication

	Native authentication with Kerberos
	Authentication Service Exchange
	Security during the AS exchange

Kerberos Tickets

	Ticket-Granting Service Exchange
	Security during the TGS exchange
	Inter-realm/inter-domain access
	Flags

Kerberos Client/Server Exchange

Client/Server Service Exchange

Kerberos and Interoperability

	Windows 2000 and classic Kerberos
	The Microsoft security subsystem
	Kerberos policies
	Classic Kerberos management
	Interoperability with classic Kerberos

This course has the following features:

	Exercises that allow users to practice in Windows 2000
	A file containing the text of the exercises
	Simulations that allow users to practice course skills, even if they don't have access to Windows 2000
	A glossary
	A Skill Assessment

	All courses in the series Windows 2000 Professional, a passing score on MCSE exam 70-210, or equivalent experience
	All courses in the series Windows 2000 Server MCSE 70-215, a passing score on MCSE exam 70-215, or equivalent experience
	All courses in the series Windows 2000 Network Administration MCSE 70-216, a passing score on MCSE exam 70-216, or equivalent experience
	All courses in the series Windows 2000 Active Directory MCSE 70-217, a passing score on MCSE exam 70-217, or equivalent experience
	Windows 2000 Security Design MCSE 70-220: Analyzing Business Requirements (W22001)
	Windows 2000 Security Design MCSE 70-220: Analyzing Technical Requirements (W22002)
	Windows 2000 Security Design MCSE 70-220: Establishing a Security Baseline (W22003)
	Windows 2000 Security Design MCSE 70-220: Planning Security for System Resources (W22004)
	Windows 2000 Security Design MCSE 70-220: Designing a Security Group Strategy (W22005)
	Windows 2000 Security Design MCSE 70-220: Designing Security Policy Inheritance (W22006)
	Windows 2000 Security Design MCSE 70-220: Protecting Resources with Auditing and Encryption (W22007)

	Windows 2000 Security Design MCSE 70-220: Using Alternate Authentication Strategies (W22009)
	Windows 2000 Security Design MCSE 70-220: Designing a Public Key Infrastructure (W22010)
	Windows 2000 Security Design MCSE 70-220: Designing Security for Network Services (W22011)
	Windows 2000 Security Design MCSE 70-220: Designing Security for Access between Networks (W22012)
	Windows 2000 Security Design MCSE 70-220: Designing Security for Communications Channels (W22013)

Microsoft® is a registered trademark of Microsoft Corporation.
Windows 2000® is a trademark of Microsoft Corporation.