Benefits Remote locations often cannot provide the adequate physical security that is required for a writable domain controller. Furthermore, remote sites can have poor network bandwidth when they are connected to a hub site, increasing logon times and other domain functions. RODCs provide a way to improve both the security and management of remote locations. The Remove a Domain Controller Wizard in Windows Server 2008 also increases security by providing an easy way for administrators to remove a domain controller if a system has become compromised. Cryptography Next Generation (CNG) Cryptography Next Generation (CNG) is an updated cryptography tool in Windows Server 2008. Cryptography Next Generation (CNG) includes a new set of technologies, components, and APIs, providing a flexible cryptographic development platform that allows organizations to create, update, and use custom cryptography algorithms in cryptography-related applications, such as Active Directory Certificate Services (AD CS), Secure Sockets Layer (SSL), and Internet Protocol security (IPsec). CNG complies with the latest cryptographic standards and implements the U.S. government's Suite B cryptographic algorithms, which include algorithms for encryption, digital signatures, key exchange, and hashing. Changes from Windows Server 2003 In Windows Server 2003, cryptography was provided in CryptoAPI. CNG in Windows Server 2008 extends the functionality of CryptoAPI and it easier to use cryptography in software. Benefits CNG gives IT staff a tool to securely perform cryptographic operations that meet Government Common Criteria requirements for storing keys. IT staff can use CNG to: Install and use additional cryptographic providers Perform basic cryptographic operations, such as creating hashes and encrypting and decrypting data Create, store, and retrieve cryptographic keys
Benefits Remote locations often cannot provide the adequate physical security that is required for a writable domain controller. Furthermore, remote sites can have poor network bandwidth when they are connected to a hub site, increasing logon times and other domain functions. RODCs provide a way to improve both the security and management of remote locations. The Remove a Domain Controller Wizard in Windows Server 2008 also increases security by providing an easy way for administrators to remove a domain controller if a system has become compromised. Cryptography Next Generation (CNG) Cryptography Next Generation (CNG) is an updated cryptography tool in Windows Server 2008. Cryptography Next Generation (CNG) includes a new set of technologies, components, and APIs, providing a flexible cryptographic development platform that allows organizations to create, update, and use custom cryptography algorithms in cryptography-related applications, such as Active Directory Certificate Services (AD CS), Secure Sockets Layer (SSL), and Internet Protocol security (IPsec). CNG complies with the latest cryptographic standards and implements the U.S. government's Suite B cryptographic algorithms, which include algorithms for encryption, digital signatures, key exchange, and hashing. Changes from Windows Server 2003 In Windows Server 2003, cryptography was provided in CryptoAPI. CNG in Windows Server 2008 extends the functionality of CryptoAPI and it easier to use cryptography in software. Benefits CNG gives IT staff a tool to securely perform cryptographic operations that meet Government Common Criteria requirements for storing keys. IT staff can use CNG to: Install and use additional cryptographic providers Perform basic cryptographic operations, such as creating hashes and encrypting and decrypting data Create, store, and retrieve cryptographic keys
WS08AndWS03ComparisonFinal_En.docx