ESC15 Vulnerability: Identifying and Protecting Your AD CS PKI
October 17, 2024
Brian Desmond
Brian is a principal at Ravenswood Technology Group where he leads a team of professionals focused on delivering best-in-breed consulting services for the Microsoft security and identity management ecosystem.
Brian has been recognized annually as a Microsoft MVP since 2003 and is the author of the fourth and fifth editions of Active Directory from O'Reilly.
Passwords are an insecure authentication mechanism. They are often easily guessed, and the computing power necessary to crack passwords is readily available. Although many organizations have the goal of switching to an entirely password-less authentication system, most companies cannot do [...]
Our automated AD DS health check process looks at hundreds of configuration settings, including DNS, FSMO roles, replication, sites and subnets, Group Policy, performance indicators, backup procedures, security settings, patching, [...]
Forgotten passwords are a key driver of Help desk calls for many organizations. They are also a major cost factor. Azure Active Directory (AD) Premium includes a Self-Service Password Reset [...]
Enabling single sign-on (SSO) for SaaS applications adds convenience for end users, as well as reduces security risks and enables you to better meet compliance requirements. Using Azure Active Directory [...]
With the Azure AD Application Proxy, you can provide remote access to web applications and Remote Desktop Services (RDS) farms without opening any inbound holes in your firewall. You also [...]
Without a license, end users will not be able to use Office 365 services like Exchange Online or OneDrive for Business, so it’s critical that users have the right license(s) [...]
[INFOGRAPHIC] Active Directory Maintenance Schedule Keep your organization’s Active Directory secure with our maintenance schedule. It contains specific advice on when – and how often – to conduct essential maintenance [...]
[WEBINAR] The Top 10 Actions Every Organization Should Take to Protect their AD from Attacks You know that cyber-attacks are coming. Maybe you’ve already been hit. Almost every attack is [...]
[WEBINAR] 10 Quick Identity Wins with Entra ID Whether you’ve already purchased Entra ID (formerly Azure AD) Premium, or you’re thinking about it, you should have a plan to start [...]
[ARTICLE] Sidebar: Using the Security Descriptor Editor in LDP to Remove the Abstraction from the ACL In this article for ITPro Today, Brian Desmond from Ravenswood Technology Group gives 4 [...]