Everything you care about in one place
Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.
Get Feederadsecurity.org
Active Directory Security
Get the latest updates from Active Directory Security directly as they happen.
Follow now 200 followers
Latest posts
Last updated 23 days ago
Active Directory Security Tip #14: Group Managed Service Accounts (GMSAs)
23 days ago
Group Managed Service Accounts (GMSAs) User accounts created to be used as...
Improve Entra ID Security More Quickly
about 1 month ago
At BSides Northern Virginia (BSides NoVa) in October 2025, I presented a...
BSides NoVa 2025 Presentation Slides Posted
about 2 months ago
My BSides NoVa talk slides are now posted. My BSides NoVA talk...
Microsoft Interview
about 2 months ago
A couple years ago, the Microsoft Security Experts Blog interviewed me regarding...
Active Directory Security Tip #13: Kerberos Delegation
about 2 months ago
Review the membership of groups for accounts and groups from another Active...
Active Directory Security Tip #12: Kerberos Delegation
about 2 months ago
I have mentioned in several presentations that Kerberos delegation is impersonation. Kerberos...
A History of Active Directory Security
about 2 months ago
During the Summer of 2024, I had a talk at Troopers called...
Active Directory Security Tip #11: Print Service on Domain Controllers
about 2 months ago
The Print Spooler service is a default service on Windows Servers and...
Active Directory Security Tip #10: FSMO Roles
about 2 months ago
Getting Microsoft supported backups of Domain Controllers is an important part of...
Active Directory Security Tip #9: Active Directory Backups
about 2 months ago
Microsoft supported backups of Active Directory are very important to have. For...
Active Directory Security Tip #8: The Domain Kerberos Service Account – KRBTGT
2 months ago
The domain Kerberos service account, KRBTGT (https://adsecurity.org/?p=483), is an important account since...
Active Directory Security Tip #7: The Tombstone Lifetime
2 months ago
The Tombstone lifetime (TSL) in Active Directory is the limit as to...