So you want to be a C|EH… What to study, what to learn, how many questions, etc.. Aside fromwhat you may have heard about the exam, I will offer a perspective from someone who has been in the security industry for quite some time.
Read the rest of this entry »

Resources and study guide for the 70-640 TS: Windows Server 2008 Active Directory, Configuring exam

Read the rest of this entry »

Study Guide and Resources for 70-643 TS: Windows Server 2008 Applications Infrastructure
Read the rest of this entry »

Study Guide and Resources for Exam 70-642 TS: Windows Server 2008 Network Infrastructure, Configuring
Read the rest of this entry »

So called fine-grained password policies are a new feature of Windows Server 2008. This new feature allows system administrators to configure password policies for different user groups. Windows Server 2003 was not as flexible as it only allowed to set one password policy for all users. The manual configuration of fine-grained password policies requires quite some time. A software program like Specops Password Policy Basic is therefor a handy addition for every system administrator dealing with Windows Server 2008 systems.

The free program is a limited version of the commercial software from the same developer. It requires the Microsoft .net Framework 2, the Microsoft Management Console and PowerShell. The interface of the application makes it less time consuming to configure password policies for specific user groups in Windows Server 2008. It basically centers around creating, configuring and managing password policies.

The following parameters can be defined for each password policy:

A Password Settings object (PSO) has attributes for all the settings that can be defined in the Default Domain Policy (except Kerberos settings). These settings include attributes for the following password settings:

• Enforce password history
• Maximum password age
• Minimum password age
• Minimum password length
• Passwords must meet complexity requirements
• Store passwords using reversible encryption
• Account lockout duration
• Account lockout threshold
• Reset account lockout after

User groups can be added to newly created policies. It has to be noted that user groups cannot be empty as empty user groups cannot be added to password policies. The program displays an overview of all password policies on the computer system. The order can be changed which is important if users are members of multiple user groups.

Source.