SMS security is implemented through directory shares, NTFS permissions, database security, groups, user accounts, SMS Administrator console snap-ins, and the WBEM/SMS Provider interface. Users must log on through WBEM before accessing data contained in the site database.