Everything you care about in one place

Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.

Get Feeder

adsecurity.org

Active Directory Security

Get the latest updates from Active Directory Security directly as they happen.

Follow now 200 followers

Latest posts

Last updated 25 days ago

Active Directory Security Tip #15: Active Directory Domain Root Permissions

25 days ago

This week let’s look at Active Directory domain permissions which are configured...

Active Directory Security Tip #14: Group Managed Service Accounts (GMSAs)

about 2 months ago

Group Managed Service Accounts (GMSAs) User accounts created to be used as...

Improve Entra ID Security More Quickly

2 months ago

At BSides Northern Virginia (BSides NoVa) in October 2025, I presented a...

BSides NoVa 2025 Presentation Slides Posted

3 months ago

My BSides NoVa talk slides are now posted. My BSides NoVA talk...

Microsoft Interview

3 months ago

A couple years ago, the Microsoft Security Experts Blog interviewed me regarding...

Active Directory Security Tip #13: Kerberos Delegation

3 months ago

Review the membership of groups for accounts and groups from another Active...

Active Directory Security Tip #12: Kerberos Delegation

3 months ago

I have mentioned in several presentations that Kerberos delegation is impersonation. Kerberos...

Active Directory Security Tip #11: Print Service on Domain Controllers

3 months ago

The Print Spooler service is a default service on Windows Servers and...

A History of Active Directory Security

3 months ago

During the Summer of 2024, I had a talk at Troopers called...

Active Directory Security Tip #10: FSMO Roles

3 months ago

Getting Microsoft supported backups of Domain Controllers is an important part of...

Active Directory Security Tip #9: Active Directory Backups

3 months ago

Microsoft supported backups of Active Directory are very important to have. For...

Active Directory Security Tip #8: The Domain Kerberos Service Account – KRBTGT

3 months ago

The domain Kerberos service account, KRBTGT (https://adsecurity.org/?p=483), is an important account since...