Collaborate Disseminate
Is there any public cloud where it is possible to set up protection on highly privileged admin accounts such that usage of such an account requires approval by a second admin? The idea is that we don’t want there to exist any… Continue reading On public cloud, admin account requiring authorization from multiple people?
Immutable laws of security: https://fossbytes.com/10-immutable-laws-security-microsoft/
If a bad guy has unrestricted physical access to your computer, it’s not your computer anymore.
I understand the hosting provider… Continue reading What are the techniques to know if VPS cloud hosting provider is accessing my data?
we have the following problem and I would like to hear your opinions for this case:
Currently several users are working with domain accounts which are in the local admin group (Yes, shame…)
You need this for build process… Continue reading Software build processes – Dependencies without admin privileges
During a penetration test, if a users NTLM hash or a valid Kerberos TGT is compromised, what attacks are possible if the user is not an administrator on any (in scope) workstations? For instance, it is possible to access (non… Continue reading What is possible with a non-administrative users Ticket Granting Ticket and/or NTLM hash?
For years, Microsoft’s baseline security policy has expired passwords after 60 days. Continue reading Password1, Password2, Password3 no more: Microsoft drops password expiration rec
Teams is on a roll at present with the number of organizations using the app accelerating past 500,000. Good planning and forethought help enormously to ensure the success of any deployment and Teams is no different. Whether you’re running a migration from Skype for Business Online or a greenfield deployment, thinking before deploying is always a good thing to do.
The post [Sponsored] Managing Teams Deployments for Better Outcomes appeared first on Petri.
Continue reading [Sponsored] Managing Teams Deployments for Better Outcomes
We’ve been developing a Flask app for a customer and a part of the agreement was that “customer admins” would be allowed to access Flask admin page to manage users, roles and business entities.
The admin functionality is ba… Continue reading Securing Flask admin pages
We have been attacked by the ransomware recently (adobe li). The strange thing is that ransomware was able to gain unimaginable high privileges. The virus of the ransomware has been located on the computer of the ordinary use… Continue reading How to prevent the ransomware to run with administrator privileges?
The general question of local admin vs {some other scheme} has been asked as the topic of other threads.
Does Microsoft allow its own developers to have local admin access or do they use separate accounts and the like? Our … Continue reading Does Microsoft give their own developers local admin access?
If an employee’s laptop is taken back from him/her for purposes of investigation, can the IT department/team that is in charge of issuing laptops etc. log into the employee’s network account on this laptop on their own or doe… Continue reading Getting access and logging into employee’s laptop – Can IT get access without the employee’s own credentials?