To: R. Jaynes who wrote (16647 ) 2/3/2000 4:55:00 PM From: David Respond to of 26039
Let's turn our eyes toward Redmond. Microsoft is getting ready to roll out Windows 2000 in a national extravaganza on February 17:microsoft.com "[T]he remote access services of Windows 2000 let you use passwords to existing PAP, CHAP or MS-CHAP systems, or add new and forthcoming authentication tools like smart cards and biometric devices, to login users. Because it implements the standards-based Extensible Authentication Protocol (EAP), you have the confidence that your Windows 2000 Server-based gateway can authenticate users with new devices as they emerge in the future and that they will work with other authentication databases as well. "Second, because the Routing and Remote Access Service can authenticate the login directly with the Active DirectoryTM service, you don't have to install a separate computer to act as an authentication server. "Third, the remote access services can use the RADIUS protocol to forward authentication to a RADIUS-capable authentication server that might validate users on a non-Windows user directory (like NetWare or UNIX). "Fourth, Windows 2000 includes an advanced RADIUS server of its own called Internet Authentication Service (IAS). With IAS, most RADIUS network access servers can integrate indirectly with Active Directory to authenticate users. For example, you might use a Cisco VPN-router and a Lucent dial-up access box and have them authenticate incoming connections against Active Directory. IAS also includes sophisticated remote access policy rules that let you manage things based on a combination of Active Directory groups, time of day, type of connection, type of authentication (for example, smart card only), encryption protocol used, strength of encryption key used, and much more. IAS can even tell the remote access server how to restrict where users can go once they connect. This lets you open access to business partners and be confident they only get to the system or two that you want them to, and they can't see other parts of the network." Posted January 21, 2000 ================ I don't know quite how they're implementing it, or who they are using, but Microsoft will be introducing a new biometric authentication function on February 17.