MCM - Active Directory Security

Toggle search form Search for: Toggle navigation

Active Directory & Azure AD/Entra ID Security

Active Directory & Azure AD/Entra ID: Enterprise Security, Methods to Secure Active Directory, Attack Methods & Effective Defenses, PowerShell, Tech Notes, & Geek Trivia…

• Home
• About
• AD Resources
• Attack Defense & Detection
• Mimikatz
• Presentations
• Schema Versions
• Security Resources
• SPNs
• Top Posts

Tag: MCM

Apr 29 2014

AD Reading: How Key Active Directory Components Work

• By Sean Metcalf in Technical Reading

The following links provide in-depth information on how key Active Directory components work. AD Data Store Windows Server 2003 Active Directory Branch Office Guide Bridgehead Server Selection (Windows 2008 R2) AD Replication Model Certificate Revocation & Status Checking Core Group Policy DNS How DNS Support for AD works Windows 2000 DNS DFS Fine-Grained Password Policy …

Continue reading

• ADReading, MCM

Apr 29 2014

AD Reading: Windows Server 2012 Active Directory Features

• By Sean Metcalf in Technical Reading

The following are extremely useful resources for Windows Server 2012 Active Directory Features. Windows 2012 Features TechED: What’s New in Active Directory in Windows Server 2012 (Dean Wells’ presentation at TechEd) How many Windows Server 2012 domain controllers do I need initially and where should I put them? PowerShell version 3 commandlets including Active …

Continue reading

• ADReading, MCM

Apr 29 2014

AD Reading: Active Directory Group Policy

• By Sean Metcalf in Technical Reading

The following are extremely useful resources for understanding the Active Directory Group Policy. Group Policy Core Group Policy Technical Reference How Core Group Policy Works o   Core Group Policy Architecture o   Core Group Policy Physical Structure o   Core Group Policy Processes and Interactions o   Network Ports Used by Group Policy o   Related Information What is …

Continue reading

• ADReading, MCM

Apr 29 2014

AD Reading: Active Directory Read Only Domain Controller

• By Sean Metcalf in Technical Reading

The following are extremely useful resources for the Active Directory Read Only Domain Controller (RODC). Read Only Domain Controller Read-Only Domain Controller Planning and Deployment Guide o   Understanding Planning and Deployment for Read-Only Domain Controllers o   RODC Branch Office Guide o   Appendix A: RODC Technical Reference Topics o   Appendix B: RODC-Related Events o   Appendix C: …

Continue reading

• ADReading, MCM

Apr 29 2014

AD Reading: Windows Server 2008 Active Directory Features

• By Sean Metcalf in Technical Reading

The following are extremely useful resources for Windows Server 2008 Active Directory Features. Server 2008 AD Features Changes in Functionality from Windows Server 2003 with SP1 to Windows Server 2008 AD DS Fine–Grained Password and Account Lockout Policy Step–by–Step Guide Fine-Grained Password Policy and “Urgent Replication” What’s New in AD DS: Active Directory Best Practices …

Continue reading

• ADReading, MCM

Apr 29 2014

AD Reading: Active Directory Replication

• By Sean Metcalf in Technical Reading

The following are extremely useful resources for understanding the Active Directory Replication. Replication How Active Directory Replication Topology Works o   Active Directory KCC Architecture and Processes o   Replication Topology Physical Structure o   Performance Limits for Replication Topology Generation o   Goals of Replication Topology o   Topology-Related Objects in Active Directory o   Replication Transports o   Replication Between …

Continue reading

• ADReading, MCM

Apr 29 2014

AD Reading: Active Directory DNS & Name Resolution

• By Sean Metcalf in Technical Reading

The following are extremely useful resources for understanding the Active Directory DNS & Name Resolution. DNS & Name Resolution How DNS Works – (a bit lengthy) o   DNS Architecture o   DNS Protocol o   DNS Physical Structure o   DNS Processes and Interactions o   Network Ports Used By DNS o   Related Information DNS Technical Reference o   What …

Continue reading

• ADReading, MCM

Apr 29 2014

AD Reading: Active Directory DFS & FRS

• By Sean Metcalf in Technical Reference

The following are extremely useful resources for understanding the AActive Directory DFS & FRS. DFS Namespaces (DFSN) & DFS Replication (DFSR) Distributed File System (DFS) Technical Reference o   What Is DFS? o   How DFS Works o   DFS Tools and Settings How DFS Works o   DFS Terminology o   DFS Client and Server Compatibility o   Characteristics of …

Continue reading

• ADReading, MCM

Apr 28 2014

AD Reading: Active Directory Client Interaction

• By Sean Metcalf in Technical Reading

The following are extremely useful resources for understanding the Active Directory Client Interaction. Client Interaction Locating Active Directory Servers o   Domain Controller Name Registration o   SRV Resource Records o   Domain Controller Location Process o   Finding a Domain Controller in the Closest Site o   Types of Locators IP/DNS DC Locator Algorithm(This is also a great general …

Continue reading

• ADReading, MCM

Apr 28 2014

AD Reading: Active Directory Backup and Disaster Recovery

• By Sean Metcalf in Technical Reference

The following are extremely useful resources for understanding the Active Directory Backup and Disaster Recovery. Backup and Disaster Recovery AD DS Backup and Recovery Step–by–Step Guide o   What’s New in AD DS Backup and Recovery? o   Known Issues for AD DS Backup and Recovery o   Best Practices for AD DS Backup and Recovery o   General …

Continue reading

• ADReading, MCM

• 1
• 2

Load more

Recent Posts

• Detecting Fake Active Directory Password Changes
• Active Directory Security Tip #16: Mitigating Kerberoast Attacks
• Active Directory Security Tip #15: Active Directory Domain Root Permissions
• Active Directory Security Tip #14: Group Managed Service Accounts (GMSAs)
• Improve Entra ID Security More Quickly

Active Directory & Entra ID Security Services

Have concerns about your Active Directory environment and/or Entra ID tenant? We help enterprises improve their security posture.

Find out how...

Popular Posts

• AD Reading: Windows Server 2019 Active Directory Features
• PowerShell Encoding & Decoding (Base64)
• Attack Methods for Gaining Domain Admin Rights in…
• Kerberos & KRBTGT: Active Directory’s…
• Finding Passwords in SYSVOL & Exploiting Group…
• Securing Domain Controllers to Improve Active…
• Securing Windows Workstations: Developing a Secure Baseline
• Detecting Kerberoasting Activity
• Mimikatz DCSync Usage, Exploitation, and Detection
• Scanning for Active Directory Privileges &…

Categories

• ActiveDirectorySecurity
• Apple Security
• Cloud Security
• Continuing Education
• Entertainment
• Entra ID Security
• Exploit
• Hacking
• Hardware Security
• Hypervisor Security
• Interview
• Linux/Unix Security
• Malware
• Microsoft Security
• Mitigation
• Network/System Security
• PowerShell
• RealWorld
• Security
• Security Conference Presentation/Video
• Security Recommendation
• Technical Article
• Technical Reading
• Technical Reference
• TheCloud
• Vulnerability

Tags

ActiveDirectory Active Directory ActiveDirectorySecurity Active Directory Security ActiveDirectorySecurityTip ADReading ADSecurity AD Security Azure DCSync DomainController GoldenTicket HyperV Invoke-Mimikatz KB3011780 KDC Kerberoast Kerberos KerberosHacking KRBTGT LAPS LSASS MCM MicrosoftEMET MicrosoftWindows mimikatz MS14068 PassTheHash PowerShell PowerShellCode PowerShellHacking PowerShellv5 PowerSploit PowerView Presentation Security SilverTicket SneakyADPersistence SPN TGS TGT Windows10 WindowsServer2008R2 WindowsServer2012 WindowsServer2012R2 Search for:

Recent Posts

• Detecting Fake Active Directory Password Changes
• Active Directory Security Tip #16: Mitigating Kerberoast Attacks
• Active Directory Security Tip #15: Active Directory Domain Root Permissions
• Active Directory Security Tip #14: Group Managed Service Accounts (GMSAs)
• Improve Entra ID Security More Quickly

Recent Comments

• Gxxxx on Active Directory Security Tip #1: Active Directory Admins
• Sean Metcalf on Securing Domain Controllers to Improve Active Directory Security
• Oliver on Securing Domain Controllers to Improve Active Directory Security
• Oddvar Moe on Securing Windows Workstations: Developing a Secure Baseline
• Kurt Falde on Securing Windows Workstations: Developing a Secure Baseline

Archives

• March 2026
• January 2026
• December 2025
• November 2025
• October 2025
• September 2025
• August 2025
• December 2020
• May 2020
• January 2020
• August 2019
• March 2019
• February 2019
• October 2018
• August 2018
• May 2018
• January 2018
• November 2017
• August 2017
• June 2017
• May 2017
• February 2017
• January 2017
• November 2016
• October 2016
• September 2016
• August 2016
• July 2016
• June 2016
• April 2016
• March 2016
• February 2016
• January 2016
• December 2015
• November 2015
• October 2015
• September 2015
• August 2015
• July 2015
• June 2015
• May 2015
• April 2015
• March 2015
• February 2015
• January 2015
• December 2014
• November 2014
• October 2014
• September 2014
• August 2014
• July 2014
• June 2014
• May 2014
• April 2014
• March 2014
• February 2014
• July 2013
• November 2012
• March 2012
• February 2012

Categories

• ActiveDirectorySecurity
• Apple Security
• Cloud Security
• Continuing Education
• Entertainment
• Entra ID Security
• Exploit
• Hacking
• Hardware Security
• Hypervisor Security
• Interview
• Linux/Unix Security
• Malware
• Microsoft Security
• Mitigation
• Network/System Security
• PowerShell
• RealWorld
• Security
• Security Conference Presentation/Video
• Security Recommendation
• Technical Article
• Technical Reading
• Technical Reference
• TheCloud
• Vulnerability

Meta

• Log in
• Entries feed
• Comments feed
• WordPress.org

Copyright

Content Disclaimer: This blog and its contents are provided "AS IS" with no warranties, and they confer no rights. Script samples are provided for informational purposes only and no guarantee is provided as to functionality or suitability. The views shared on this blog reflect those of the authors and do not represent the views of any companies mentioned. Content Ownership: All content posted here is intellectual work and under the current law, the poster owns the copyright of the article. Terms of Use Copyright © 2011 - 2025.

Content Disclaimer: This blog and its contents are provided "AS IS" with no warranties, and they confer no rights. Script samples are provided for informational purposes only and no guarantee is provided as to functionality or suitability. The views shared on this blog reflect those of the authors and do not represent the views of any companies mentioned.

Made with by Graphene Themes.