Operating System Security - CompTIA Security+ SY0-701 - 4.5

Active Directory

A database of everything on the network

- Computers, users, accounts, file shares, printers, groups and more

- Primarily Windows-based

Manage authentication

- Users login using their AD credentials

Centralized access control

- Determine which users can access resources

Commonly used by Help Desk

- Reset passwords, manage accounts, etc

Group Policy

Manage computers in an active directory domain

- Group policy is usually updated at login

- Local and domain policies

- Group policy management editor

A central console

- Login scripts

- Network configurations (QoS)

- Security parameters

Comprehensive control

- Hundreds of configuration options

Security-Enhanced Linux (SELinux)

• Security patches for the Linux kernel

- Adds mandatory access control (MAC) to Linux

- Linux traditionally uses

- Discretionary Access Control (DAC)

• Limits application access

- Least privilege

- A potential breach will have limited scope

• Open source

- Already included as an option with many Linux

distributions

<>

<>