This book covers all security features of Win2K like NTFS, EFS, security templates, ...
It also cover a lot of security issues which are not specific to W2K but that W2K use or implement: IPSec, VPN, Firewall, DMZ, PKI, Radius, SSL, Kerberos, SNMP, etc...
It also explain how to secure all W2K services at the maximum (RIS, DNS, DHCP, WINS, Group policy, Active directory and Trust relationship, Telnet, Terminal services, ...)
Because W2K is much more secure than older Windows version (W9x, NT40), implementing the maximum W2K security could result in a loss of compatibility with these old systems.
This book just explains how to deal with that issue, and how to increase NT40 or W9x security (for example to support NTLMV2 or SMB signing)
There is also an interesting Chapter about interoperability with UNIX, Novell, Macintosh, LINUX, SAMBA,..
What about the form?
Each chapter begin with a case study. Then, after each explanation of a security concept, the book explains how to apply this concept to the case study. It doesn't forget explanation about why this or that solution is the correct one.
Probably one the best MS-Press Book I've read ...
A Must-have for every IT administrator or architect who cares about W2K security! I recommend it highly!