Everything you care about in one place
Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.
Get Feederadsecurity.org
Active Directory Security
Get the latest updates from Active Directory Security directly as they happen.
Follow now 198 followers
Latest posts
Last updated 1 day ago
Active Directory Security Tip #14: Group Managed Service Accounts (GMSAs)
1 day ago
Group Managed Service Accounts (GMSAs) User accounts created to be used as...
Improve Entra ID Security More Quickly
18 days ago
At BSides Northern Virginia (BSides NoVa) in October 2025, I presented a...
BSides NoVa 2025 Presentation Slides Posted
25 days ago
My BSides NoVa talk slides are now posted. My BSides NoVA talk...
Microsoft Interview
25 days ago
A couple years ago, the Microsoft Security Experts Blog interviewed me regarding...
Active Directory Security Tip #13: Kerberos Delegation
29 days ago
Review the membership of groups for accounts and groups from another Active...
Active Directory Security Tip #12: Kerberos Delegation
about 1 month ago
I have mentioned in several presentations that Kerberos delegation is impersonation. Kerberos...
A History of Active Directory Security
about 1 month ago
During the Summer of 2024, I had a talk at Troopers called...
Active Directory Security Tip #11: Print Service on Domain Controllers
about 1 month ago
The Print Spooler service is a default service on Windows Servers and...
Active Directory Security Tip #10: FSMO Roles
about 1 month ago
Getting Microsoft supported backups of Domain Controllers is an important part of...
Active Directory Security Tip #9: Active Directory Backups
about 1 month ago
Microsoft supported backups of Active Directory are very important to have. For...
Active Directory Security Tip #8: The Domain Kerberos Service Account – KRBTGT
about 2 months ago
The domain Kerberos service account, KRBTGT (https://adsecurity.org/?p=483), is an important account since...
Active Directory Security Tip #7: The Tombstone Lifetime
about 2 months ago
The Tombstone lifetime (TSL) in Active Directory is the limit as to...