Active Directory Security

Active Directory Auditing Guidelines: AD Security 101

Active Directory Auditing Guidelines: AD Security 101

  • Mickey Bresman
  • Aug 29, 2017

This blog addresses why Active Directory auditing is necessary. Who moved my object and other AD mysteries Active Directory was created to simplify identity services in the enterprise, and ease the lives of sys admins everywhere, but lack of visibility into AD operations continues to be a major pain point.…

spotting scams

Top 6 Considerations for Choosing an Active Directory Disaster Recovery Solution

  • Thomas Leduc
  • Jul 31, 2017

Most IT departments have no issue admitting the high importance of a highly available Active Directory. It’s become clear that while Active Directory downtime is rare when it does happen, it’s devastatingly costly. Most modern enterprises live and die by their identity infrastructure, and Active Directory is primarily at the…

Hackers Targeting Critical Healthcare Facilities With Ransomware During Coronavirus Pandemic

Why You Should Pay Attention to Excessive Privilege in Active Directory

  • Thomas Leduc
  • Mar 19, 2017

I addressed Active Directory excessive privilege in the past as part of other, broader topics. But recently I started thinking it’s a great time to dedicate an entire article to it. This is not a random thought on my part. All you need to do is look at a few…

Using AD FS To Change Your AD Password Anywhere, Anytime

Using AD FS To Change Your AD Password Anywhere, Anytime

  • Sean Deuby
  • Oct 25, 2016

One of the really annoying things about passwords is that you have to remember them. If you can't remember your password at a SaaS provider, it's pretty straightforward: you click on the "forgot password" link and go through the password recovery process. As is often the case, however, the corporate…

Hidden Gems: The Azure Active Directory Whitepapers

Hidden Gems: The Azure Active Directory Whitepapers

  • Sean Deuby
  • Jun 27, 2016

It's pretty well accepted now that the world is moving away from painstakingly planned, piloted, deployed, and maintained on-premises applications in local data centers. It's moving to web services, hosted in the cloud (best definition: your stuff on someone else's computer) whose new capabilities are rapidly deployed and refined via…

SaaS Passwords Are Like Cockroaches

SaaS Passwords Are Like Cockroaches

  • Sean Deuby
  • Feb 27, 2016

And in the case of passwords, each one - especially each forgotten one - is a little security risk scurrying around in the shadows. You may think you have gotten rid of them (or at least reduced them to a manageable amount), but they still keep popping up. And as…

8 Situations That Put Your Active Directory At Risk

8 Situations That Put Your Active Directory At Risk

  • Sean Deuby
  • Dec 01, 2015

Active Directory Domain Services (AD DS) has grown to be a marvelously reliable, highly scalable, and fault tolerant core component of your company’s IT infrastructure. It generally works quite well without requiring a lot of attention. But the AD DS admin must put in extra work to take the service…

Detect, Recover, and Restore From Active Directory Events

Azure AD Connect: the staging server

  • Sean Deuby
  • Oct 20, 2015

Microsoft continues to work on a sore spot in its hybrid identity strategy: The challenge of deploying its identity bridge between Active Directory Domain Services (AD DS) on premises and Azure Active Directory in the cloud. This bridge consists of AD FS for federation and a succession of utilities, culminating…