AD Domain ServicesArchitecture & Design

What is Azure Active Directory?

Azure Active Directory: Introduction Azure Active Directory is a multi-tenant, cloud-based directory and identity management service provided by Microsoft. It offers identity and access capabilities for applications running in both Microsoft Azure and in an on-premises environment. It is the foundation for Office 365 and other SaaS applications; users are allowed to sign in and access the…
Read more
AD Domain ServicesOperations & Troubleshooting

Active Directory Recycle Bin 

What is Active Directory Recycle Bin?  The Active Directory Recycle Bin feature allows administrators to restore deleted AD objects. In Active Directory, objects such as users, computers, groups, or organizational units may be unintentionally removed. Administrators may find it difficult to correct such mistakes. Therefore, for administrators to easily retrieve deleted objects, Microsoft…
Read more
AD Domain ServicesDirectory Objects & Identity Data

Active Directory Schema: An overview into Schema Extension

Active Directory (AD) schema is a blueprint that describes the rules about the type of objects that can be stored in the AD as well as the attributes related to these objects. The schema thus defines the content, and the structure of the object classes, and theobject attributes used to create an object. While creating a new object, the AD references the classes defined in the schema and…
Read more
GPO FundamentalsGroup Policy & Endpoint Policy

Active Directory Password Policy

How to Configure a Password Policy – An Overview & Guide  Password Policy ensures that a user password is strong and is changed in a periodic manner so that it becomes highly impossible for an attacker to crack the password.To ensure a high level of security for user accounts in the Active Directory domain, an administrator must configure and implement a domain password policy.
Read more
AD Domain ServicesDirectory Objects & Identity Data

Active Directory (AD) Computer Object

SAMAccountName: This is also a naming attribute that is used to uniquely identify a computer object in the network. It is the pre-Windows 2000 logon name of an object. ObjectCategory: It includes the distinguished name of the object class to which the computer object belongs or the name of one of its superclasses. ObjectClass: It contains the distinguished name of the object class to which…
Read more
AD Domain ServicesDirectory Objects & Identity Data

Ownership of objects in Active Directory

The user who creates the object is by default the owner and administrator of the object. He can delegate administrative rights to another user for ease of management. Administrative rights can be delegated by using the delegation control wizard in Active Directory. To delegate control of a container object in Active Directory: Expand the ADUC console tree Then right click on the container…
Read more
GPO FundamentalsGroup Policy & Endpoint Policy

Active Directory Group Policy

Introduction- What is Group Policy?    Group Policy is a security tool built into Microsoft Active Directory that gives network administrators access to a variety of advanced settings. Administrators can set up and manage user settings, operating systems, and applications from a single platform. Group Policies help strengthen the security of users and computers and guard against both insider…
Read more
Active Directory Objects

Creating objects in Active Directory

What are Active Directory Objects? Active Directory (AD), Microsoft’s proprietary directory service for Windows Server, allows administrators to control permissions and network resource access. In AD, data is stored as objects. An object is a fundamental unit of data and is typically defined as a resource, such as printers or computers, or a security principle, such as…
Read more
Uncategorized

Free Active Directory Tools

Active Directory Query Tool Stop Searching, Query your Active Directory to get all the required data in a single view. Download Now Active Directory CSV generator tool Generate any CSV file that you require by using just the basic Active Directory Attributes. Download now Last Logon Reporting Software Helps you find the Last Logon time of the Users in the Domain. Download…
Read more
AD Domain ServicesArchitecture & Design

Simulating AD attacks with Purple Team labs

Purple teaming in an Active Directory (AD) context is the discipline of running controlled, authorized attack simulations (red) while observing, tuning, and validating detection + response (blue). Done well, it turns vague goals like “improve AD security” into measurable outcomes: which attacks did we detect, how fast, with what signal quality, and what changed because of it. This guide…
Read more