Collaborate Disseminate
In this guide about Active Directory security, we’re going to detail five steps that IT admins need to follow to secure Active Directory environments in an organization. There are many best practices you’ll need to be familiar with to ensure Active Directory security, including restricting the use of privileged accounts, monitoring Windows Event Log for […] Continue reading Active Directory Security – 5 Steps to Secure AD
Learn all there is to know about how Active Directory (AD) replication works. This guide covers the basics of how domain controllers (DCs) replicate all of your user accounts, passwords, computers, and other objects in your environment. Learn about how sites define the logical layout of your network and how the tools and features in […] Continue reading Active Directory Replication: A Guide for IT Pros
Our need is to allow users to log in to their online workplace (e.g. using Citrix), and have access to their office applications, as well as some of the internally hosted applications the servers in the same datacenter.
Suppose this remote… Continue reading Active directory configuration on a shared remote workplace environment
Microsoft has released out-of-band (OOB) updates for several Windows Server configurations to fix an Active Directory issue related to Microsoft .NET Framework. The company explained on the Windows health dashboard that the bug surfaced following the release of January 2022 Patch Tuesday updates (via Bleeping Computer). “After installing updates released January 11, 2022 or later, […] Continue reading Microsoft Releases Out-Of-Band Updates to Fix Windows Active Directory Issues
Domain controllers (DCs) are at the heart of Active Directory Domain Services (AD DS), the directory service that provides authentication, authorization, and password management for Microsoft Windows networks. Find out here why they’re so important and what they do. What does a domain controller do? A domain controller (DC) is a server on your network that manages access for users, computers, servers, etc. centrally. It uses […] Continue reading What is a Domain Controller?
I have been thinking of implementing a new practice where local admin privileges are disabled entirely from all endpoints. For users who need to elevate privileges, they will have a separate admin account dedicated and restricted only to t… Continue reading Is there really any benefit in having a separate local admin account
There is an attack on Active Directory named "Kerberoasting": https://attack.mitre.org/techniques/T1558/003/
I ask TGS for ticket to access some SPN
Part of this ticket is encrypted with SPN’s password hash (something that only … Continue reading Why AD Kerberos uses password hash and not session key for tickets?
I’m running a pentest and I’ve managed to get man-in-the-middle access between a machine and a domain controller. A process on the machine will log into the DC, as a domain admin, to get a Kerberos ticket. I can see the AS-REQ/AS-REP &… Continue reading How to extract Kerberos ticket from Wireshark?
Setup:
Some service (SAS, HTTP, mongodb) running on a Linux server and using Windows AD/Kerberos for SSO.
On Linux, httpd is running as the http (Unix) account, and mariadb is running as "mariadb" (Unix) account.
Understanding:… Continue reading kerberoasting: Usefulness of hacking a SSO (GSSAPI/SPNEGO) service on Linux
Learn how Active Directory makes it easier for IT to manage their organization’s computer resources. It is especially useful for companies that have to manage lots of endpoints and servers. Read more here. What is Active Directory and why is it used? Active Directory is a directory service from Microsoft that stores information about objects […] Continue reading What is Active Directory: The Ultimate Guide