Even after 25 years, Microsoft Active Directory (AD) remains the backbone of identity and access management in up to 90% of enterprise IT environments worldwide, making it a high-value target for ...

An improperly configured Active Directory can render the rest of your security measures useless. With so much attention being paid to factors like endpoint security and server hardening, it is easy to ...

As the gateways to corporate networks, VPNs are an attractive target for attackers seeking access to Active Directory environments. And when VPN credentials become compromised — through something as ...

Earlier this week I saw a situation in which someone with a small, single-domain controller network performed a restoration of their domain controller. This restoration effectively reverted the Active ...

Improving Active Directory performance is on everyone's mind. You can do so relatively easily using disconnected recordsets. A disconnected recordset (DRS) is an ADO record that resides in memory. A ...

Password resets are often the first response to a suspected compromise. It makes sense; resetting credentials is a quick way to cut off an attacker’s most obvious path back in. However, that doesn’t ...

Several years ago I documented Windows updates that needed additional registry keys to be set before you are fully patched. These updates can be hard to keep track of. Microsoft recently released ...

If Active Directory Users and Computers (ADUC) is not responding or is slow to load on Windows Server or Windows 11/10 client machines, the solutions provided in this post can be applied to ...

We configure our computer objects in dedicated OUs for computers based on branches. We have a main computer GPO, but this way we can apply different GPOs to each branch without affecting others. We ...

Canonical has made it easy for admins to join Ubuntu Desktop to Active Directory domains. Jack Wallen walks you through the steps. Ubuntu 21.04 was made available last month, and it has been quite the ...