The Windows 2000 Target of Evaluation (TOE) is a general-purpose, distributed, network operating system that provides controlled access between subjects and user data objects. Windows 2000 has a broad set of security capabilities including single network logon; access control and data encryption; extensive security audit collection; and Light-weight Directory Access Protocol (LDAP) Directory-based resource management. The Windows 2000 TOE provides the following security services: user data protection, audit, identification and authentication, security management, protection of the TOE Security Functions (TSF), resource quotas and TOE access banners. The Windows 2000 security policies provide network-wide controlled access protection (access control), encrypted data/key protection, and encrypted file protection. These policies enforce access limitations between individual users and data objects. The TOE is capable of auditing security relevant events that occur within a Windows 2000 network. All these security controls require users to identify themselves and be authenticated prior to using any node on the network.
\r\nThe Windows 2000 ST contains the following additional sections:
\r\nNone.
","environmental_strengths":"The evaluation of Windows 2000 provides a moderate level of independently assured security in a conventional TOE and is suitable for the environment specification in this ST. The assurance requirements and the minimum strength of function were chosen to be consistent with this goal and to be compliant with the Controlled Access Protection Profile (CAPP). The TOE assurance level is Evaluation Assurance Level (EAL) 4 augmented with ALC_FLR.3 and the TOE minimum strength of function is SOF-medium.
\r\n","features":[]}