Everything you care about in one place

Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.

Get Feeder

adsecurity.org

Active Directory Security

Get the latest updates from Active Directory Security directly as they happen.

Follow now 197 followers

Latest posts

Last updated 2 days ago

Active Directory Security Tip #12: Kerberos Delegation

2 days ago

I have mentioned in several presentations that Kerberos delegation is impersonation. Kerberos...

Active Directory Security Tip #11: Print Service on Domain Controllers

5 days ago

The Print Spooler service is a default service on Windows Servers and...

A History of Active Directory Security

5 days ago

During the Summer of 2024, I had a talk at Troopers called...

Active Directory Security Tip #10: FSMO Roles

7 days ago

Getting Microsoft supported backups of Domain Controllers is an important part of...

Active Directory Security Tip #9: Active Directory Backups

9 days ago

Microsoft supported backups of Active Directory are very important to have. For...

Active Directory Security Tip #8: The Domain Kerberos Service Account – KRBTGT

18 days ago

The domain Kerberos service account, KRBTGT (https://adsecurity.org/?p=483), is an important account since...

Active Directory Security Tip #7: The Tombstone Lifetime

19 days ago

The Tombstone lifetime (TSL) in Active Directory is the limit as to...

Active Directory Security Tip #6: Domain Controller Operating System Versions

20 days ago

Ensuring proper Domain Controller configuration is key for Active Directory security. Part...

Active Directory Security Tip #5: The Default Domain Administrator Account

21 days ago

In every Active Directory domain, there’s the default domain Administrator account. Here...

Active Directory Security Tip #4: Default/Built-In Active Directory Groups

22 days ago

There are several default/built-in privileged groups that should be reviewed: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups PowerShell...

Active Directory Lab Build Script

22 days ago

Over the summer, I rebuilt my Active Directory lab environment with multiple...

Active Directory Security Tip #3: Computer Accounts

23 days ago

Active Directory computers should be reviewed about once a year. Old operating...