Uncategorized

Indexing mechanisms that make Active Directory searches fly (and when not to use them)

September 5, 2025
If “search is slow” keeps popping up, the root cause is usually query shape and whether the directory can answer it with an index. In Active Directory, the right index can cut a search from seconds to milliseconds—but the wrong one just bloats NTDS.dit. Internal links throughout point to Windows-Active-Directory.com references (WAD), and external links go to Microsoft’s first-source…
Read more
Uncategorized

Excess Permissions: Lessons from Legacy Setups

September 5, 2025
A timeless reference on why permission sprawl happens due to excess permissions, how it breaks defenses, and the exact steps to unwind it—especially in legacy Active Directory and hybrid estates – Security Architecture/Active DirectoryLeast Privilege Quick Jump: Surface vs. Real Problem · First Principles · Expert Mental Models · Misunderstandings & Checklist · Applications &amp…
Read more
Uncategorized

How to secure your emails using Azure Information Protection

June 5, 2024
Organizations handle many confidential documents daily, from sensitive financial information to proprietary business strategies. A concerning problem in many such organizations is the weak security measures that leave sensitive data vulnerable to unauthorized access. Emails and documents are often circulated in plain text, accessible by anyone within the organization, regardless of their role or…
Read more
Uncategorized

One-time passcode authentication for Azure AD B2B Guest Users

June 5, 2024
Azure Active Directory (Azure AD) B2B guest users offer a convenient way to grant access to external users without adding them to your core directory. However, ensuring secure authentication for these guests is crucial. One-time passcode (OTP) authentication provides a simple and secure method for B2B guest user access. OTP Authentication for B2B Guests When a guest user who cannot be identified…
Read more
Uncategorized

How Azure AD Pass-Through Authentication strengthens your security

April 27, 2024
What is Pass-Through Authentication (PTA) in Azure AD Connect? In Azure Active Directory (AD), now known as Microsoft Entra ID, pass-through authentication is a type of hybrid authentication method where users sign-in to applications on-premises and cloud with the same password. This way, users are less likely to forget their credentials and have lesser needs to run back to IT support, saving IT…
Read more
Uncategorized

Azure vs AWS: Which Cloud Platform is Right for You?  

July 28, 2023
Microsoft Azure and Amazon Web Services (AWS) are two of the leading cloud computing platforms on the market. Both platforms offer a wide range of services, including computing, storage, networking, databases, analytics, machine learning, and artificial intelligence. So, which platform is right for you? The answer depends on your specific needs and requirements. Here is a comparison of Azure…
Read more
Uncategorized

How to provision user in Azure - Azure User Provisioning

June 24, 2023
Introduction   User provisioning in Azure is the process of creating, updating, and deleting user accounts in Azure Active Directory (Azure AD). Azure AD is a cloud-based identity and access management (IAM) service that helps organizations manage their users and devices. User provisioning can be done manually or automatically. Manual provisioning involves creating, updating, and deleting…
Read more