* Microsoft adds identity management features in RC0 for Windows Server 2003 R2
When you go to download the release candidate (RC0) for Windows Server 2003 Release 2 (R2), Microsoft tells you that this new version of the server operating system will help you “extend your connectivity and control to data and applications throughout and beyond your organization” (see the quote). What’s that mean?
What Microsoft is primarily talking about are the new identity management features in R2. Most of the talk is about Active Directory Federation Services (ADFS) but there are other ID goodies in the new release. A short list includes:
* Active Directory Federation Services: ADFS provides Web-based extranet authentication/authorization, single sign-on (SSO), and federated identity services for Windows Server environments. Extranet authentication and SSO services extend the authentication and distributed session capabilities of Windows for internal networks to Internet-facing perimeter networks. Identity federation makes it possible for two organizations to share a user’s Active Directory identity information securely over federation trusts, facilitating collaboration with partners and delegating user management.
* Active Directory Application Mode: ADAM, while not new, is being included with the operating system for the first time. It’s an independent mode of Active Directory without infrastructure features, which can provide directory services for applications. Operating as a stand-alone data store or interacting with an Active Directory domain controller, ADAM enables administrators to tailor their directory services infrastructure to varying degrees of local control/autonomy or shared services. ADAM provides a data store and services for accessing that data store, uses standard APIs for accessing application data, and works with ADFS to provide a user store for extranet application authentication.
* Federated Windows SharePoint Services: This extends SharePoint collaboration to business partners and customers. Users will be able to access SharePoint sites offered by partners without presenting a separate password. SharePoint administrators, in turn, can offload credential management to their partners, saving administrative costs. Administrators gain the ability to automatically restrict access to partner SharePoint sites by disabling a user’s Active Directory account, thereby reducing security threats.
* Unix Identity Management: Windows Server 2003 R2 provides Windows and Unix integration, which helps to establish uninterrupted user access and efficient management of network resources across operating systems. Two major features are offered: Server for NIS and password synchronization.
Server for NIS helps integrate Windows and Unix-based Network Information Service servers by enabling an Active Directory domain controller to act as a master NIS server for one or more NIS domains. Password Synchronization helps integrate Windows and Unix servers by simplifying the process of maintaining secure passwords. With Password Synchronization, users do not need to maintain separate passwords for their Windows and Unix accounts or remember to change the password in multiple locations. Password Synchronization automatically changes a user password on both Unix and Windows networks whenever the user changes his or her password.
Explore all of the new features in R2 for yourself: Download and test the release candidate, read the documentation, and start planning how the new functionality can help your network, your users, your team – but especially how it can help you.
