Ever more secure
SP2 now includes 128-bit encryption; 56-bit isn't even an option. The service pack automatically upgrades your computer to high encryption and, even if you remove SP2, you can't revert to low encryption. This isn't a problem for most users, because high encryption is more desirable.
In the enterprise, high encryption spans all encryption services. This includes Kerberos, Encrypting File System, RAS, RPC, SSL/TLS, IPSec, Terminal Services RDP, and CryptoAPI.
The inclusion of 128-bit encryption as a standard feature also means that you don't have to customise your Windows 2000 deployment shares and CDs to include the High Encryption Pack. Remember Rsaenhs.dll, the file you put in your $OEM$ distribution folders in order to upgrade encryption? You can forget about it now.
Other security fixes are mostly user interface updates for Access Control Lists and other security features. Also included are stability-enhancing updates and fixes that address a number of vulnerabilities. SP2 includes all regression-tested security fixes for Windows 2000.
 | |
| |
| |
|
1. Intro
2. Start it up 3. Slug some bugs |
4. First, do no harm
5. Ever more secure 6. Not quite perfect |
| |
| |
