ESC15 Vulnerability: Identifying and Protecting Your AD CS PKI
October 17, 2024
David Conners
David Conners leverages his 20+ years of experience in identity and security consulting to deliver state-of-the-art solutions for his customers. He is passionate about helping businesses manage data and systems access safely and effectively. David specializes in architecture and development of identity management solutions using the Microsoft stack, with extensive knowledge of Azure.
The Microsoft Azure portal includes a subset of permissions called protected actions, which can be used to manage Conditional Access (CA) policies and cross-tenant access settings. Protected actions are associated [...]
B2B user management is a challenge for many organizations that utilize it for collaboration. In this blog, we discuss how to address this challenge using cross-tenant synchronization. Cross-tenant synchronization connects [...]
In a previous blog series, I discussed how to use certificate authentication for PowerShell scripts running in a standard Windows environment. (See “Authentication Options for Automated Azure PowerShell Scripts, Part [...]
Microsoft announced that after October 31, 2021, viral Azure Active Directory tenants would no longer be created for B2B collaboration. [...]
Inactive accounts that aren’t disabled in a timely manner threaten your AD environment. Cleanup of these accounts is crucial to keeping an organization secure. [...]
Shortcuts for when you’re building scripts to work with AD or working on servers with limited access to tools. [...]
In Part 3 of this blog series, we discuss some other important considerations when taking this approach to automation. [...]
Part 2 of this blog series gets into the details of how to create and configure an app registration for use with an automated PowerShell script. [...]
Automation is a fundamental requirement for good systems administration, no matter what the platform. Being able to automate tasks ensures consistency and prevents mistakes caused by forgetfulness or by simply [...]