
Microsoft
®
Windows Server
™
2003 White Paper
Windows NT 4.0 Server Upgrade Guide 99
Figure 47. Comparing the Bob process under the earlier process-based security model and the new
component-based security model in the .NET Framework
The new security model of the .NET Framework provides many features not available in a
process-based model. One of the biggest advantages is the ability of the common language
runtime to inspect a call stack during execution and verify that every assembly in the call stack
has the rights to perform the requested task. Because the call stack is now inspected at runtime,
an “untrusted” piece of code cannot lure a trusted piece of code into doing something. This
security addition helps applications that are built using various component libraries from different
vendors.
For more information about security, search for “security” in the .NET Framework Software
Development Kit.
Security-Related Enhancements for Authentication
To authenticate local and remote users, Windows Server 2003 provides the following two new
features of note:
• Credential Manager
• Constrained Delegation
Credential Manager
Credential Manager stores usernames and passwords and also stores links to certificates and
keys. As a result, a consistent, single sign-on experience is provided for users—including roaming
users. Single sign-on makes it possible for users to access resources over the network without
having to repeatedly supply their credentials.
Kommentare zu diesen Handbüchern