Before we start an overview of this section as usual let's answer the following question.
Which technology allows you to use biometric functionality to sign into Windows devices.
Press stop here and think about it.
And the answer is vendors.
Hello.
It is a new technology and Windows 10 and Windows 10 Mobile that allows you to authenticate by using
your fingerprint and iris scan or other biometric data.
Now as an administrator you must make sure that user accounts in your environment conform to the security
standards set by your organization to achieve this.
Windows Server 2016 and later allows you to use account policies to configure security related sentence
for user accounts.
Additionally with Windows server you can configure additional security with protected groups authentication
policies and authentication policies silence.
This section explains the sentence that are available for account security and the methods to configure
those settings so after completing that section you'll be able to describe account security in Windows
Server.
Describe password policies describe account lock out policies describe Burris policies configure domain
account policies and describe how to protect groups and aided heirs.
You'll be able also to describe fine grained password and lock out policies.
Describe password settings objects or Pierce OS configure a fine grained password all this and describe
here so precedents aren't resultant peers so you'll also be able to explain account security options
and Windows Server 2016 and later and configure user account policies will also describe how to enhance
password authentication with Windows Halo and the Microsoft Asia multi factor authentication service
or MF a service in any authentication based network.
It is critically important to secure account credentials such as usernames and passwords to achieve
account security.
Windows Server 2016 or later versions provide multiple options including the following password all
this is to configure multiple requirements such as password age lands and complexity rich user response
for its must meet account to lock out policies that enable you to configure that an account must log
when the wrong password are enter.
Fine grained password policies that provide the ability to specify a different password policies and
account lock out policies for different groups of users such as executives administrators service accounts
or regular users.
Protected users which enables you to specify critical accounts that should be additional is secured
authentication policies and authentication policies Silas that provides you the ability to use claim
based rules to specify which users are able to sign in to which computers and curb Burrus policies that
determine Gerber as related sentence such as ticket life times and enforcement.
This section explains these options in further detail.
Let's get started.