Browse by Tags

All Tags » Active Directory Security (RSS)
Sorry, but there are no more tags available to filter with.

Does it matter what I install on Domain Controllers.

Do you have SMS client installed on your domain controllers? If so you have given your SMS team the ability to run jobs against the DC’s this can include installing any software that they want. Now I am not saying there is anything wrong with having SMS...
Posted by Garry | 3 comment(s)

First Step in Understanding Active Directory Security

Download the following documents and spend some time reading them. Best Practice Guide for Securing Active Directory Installations Document Best Practices for Delegating Active Directory Administration These will give you a good grounding in good administrative...
Posted by Garry | with no comments

Lets you list and optionally remove DACLs on OU's for a specified user or group

Dsrevoke is a command-line tool that can be used on domain controllers that are running Windows Server 2003 or Windows 2000 Server to report the existence of all permissions for a specific user or group on a set of OUs in a domain and optionally remove...
Posted by Garry | with no comments