2019-02-27 20:05:05 +00:00

5.0 KiB

Identity and access management

Access Control Overview

Dynamic Access Control Overview

Security identifiers

Security Principals

Local Accounts

Active Directory Accounts

Microsoft Accounts

Service Accounts

Active Directory Security Groups

Special Identities

User Account Control

How User Account Control works

User Account Control security policy settings

User Account Control Group Policy and registry key settings

Windows Hello for Business

Protect derived domain credentials with Credential Guard

How Credential Guard works

Credential Guard Requirements

Manage Credential Guard

Credential Guard protection limits

Considerations when using Credential Guard

Credential Guard: Additional mitigations

Credential Guard: Known issues

Protect Remote Desktop credentials with Remote Credential Guard

Smart Cards

How Smart Card Sign-in Works in Windows

Smart Card Architecture

Certificate Requirements and Enumeration

Smart Card and Remote Desktop Services

Smart Cards for Windows Service

Certificate Propagation Service

Smart Card Removal Policy Service

Smart Card Tools and Settings

Smart Cards Debugging Information

Smart Card Group Policy and Registry Settings

Smart Card Events

Virtual Smart Cards

Understanding and Evaluating Virtual Smart Cards

Get Started with Virtual Smart Cards: Walkthrough Guide
Use Virtual Smart Cards
Deploy Virtual Smart Cards
Evaluate Virtual Smart Card Security

Tpmvscmgr

Enterprise Certificate Pinning

Install digital certificates on Windows 10 Mobile

Windows 10 credential theft mitigation guide abstract

Configure S/MIME for Windows 10 and Windows 10 Mobile

VPN technical guide

VPN connection types

VPN routing decisions

VPN authentication options

VPN and conditional access

VPN name resolution

VPN auto-triggered profile options

VPN security features

VPN profile options

How to configure Diffie Hellman protocol over IKEv2 VPN connections

How to use single sign-on (SSO) over VPN and Wi-Fi connections