Fortify Remote-Server Security

 Executive Summary:

Windows Server 2008's read-only domain controllers (RODCs) will make your infrastructure edge servers more secure and reduce the damage an attack from the edge can cause. RODCs feature one-way-only replication, restricted user ID and password caching, and administrator rights restrictions. Malicious users, admins, and intruders will find it difficult to breach remote servers and even harder to extend a successful attack through a domain or forest.

Microsoft is marketing Windows Server 2008 as the most secure Windows OS ever. One of its most important new security features is the read-only domain controller (RODC), a combination of new technologies that not only increases the security of Active Directory (AD) data, but also drastically limits malicious and unauthorized access to your entire AD forest from remote domain controllers (DCs). . . .