More info on http://www.techdays.be.

3. • Create simpler authorization
models for file based resources
• Stop creating 1000s of groups to
control access
• Classify files
• Control access to files based on
AD attributes (claims)
• Deploy the access model

6. Sales
UK Sales UK UK Sales
RW
US Sales US US Sales
RW
HI UK
Sales HI UK
RW Sales Managers
HI US
Sales HI US
RW

7. Creation of complex folder structures
Token bloat
Token bloat
No simple solution
Server isolation using Ipsec?

13. Demo

15. User Group Member of Value UK Sales
AND
Resource Country Any of Value UK
AND
Resource Impact Any of Value Mod/low

17. Sales UK Sales
UK
US Sales
US
Sales Managers

18. Demo

21. Demo

23. Compound ID
Groups PAC contains a user’s
User group and claims
Claims
information
Groups
Device +
Claims
Device information
User’s group memberships added to PAC
Authorization based on group membership Authorization based on group
membership, user and device claims

25. Sales
UK
US

26. Demo

30. John has designed and implemented computing systems ranging
from high-speed industrial controllers through to distributed IT
systems with a focus on security and high-availability. A key player
in many IT projects for industry leaders including Microsoft, the UK
Government and multi-nationals that require optimized IT systems.
Developed technical training courses that have been published
worldwide, co-authored a highly successful book on Microsoft
Active Directory Internals, presents regularly at major international
conferences including, TechEd, IT Forum and European summits.
John can be engaged as a consultant or booked for speaking
engagements through XTSeminars. www.xtseminars.co.uk