Tag Archives: Active Directory

Risk of Active Directory misconfigurations; Forest Druid for analysis

[German]Heute noch ein Sammelbeitrag zur IT-Sicherheit. Fehlkonfigurationen und Standardeinstellungen des Active Directory können die IT-Sicherheit von Unternehmen gefährden. Bastien Bossiroy von den NVISO Labs hat sich Gedanken um dieses Thema gemacht und bereits Ende Oktober 2023 einen Beitrag zu den … Continue reading

Posted in Security, Windows | Tagged , , | Leave a comment

How to find weak passwords in Active Directory and eliminate them with PowerShell

Advertising – Weak or compromised passwords are a known gateway for attackers. If you are able to identify which users in Active Directory (AD) are threatened by this, then PowerShell can help to remedy it. However, PowerShell scripts cannot eliminate … Continue reading

Posted in Security, Software | Tagged , , | Leave a comment

AD security on the test bench

[German]Another topic for administrators responsible for using a Microsoft Active Directory (AD) in the enterprise. Rumor has it that many companies rely on Microsoft's AD for their IT in business operations. The stuff has been on the market for 20 … Continue reading

Posted in Security, Windows | Tagged , , | Leave a comment

Active Directory Admins: May 2022 updates may force DCs to a boot loop (AltSecID attribute set on krbtgt)

[German]Today a short information for administrators of Active Directory Domain Controllers under Windows Server, who still have to apply the security updates for May 2022. I have come across the information that there is a bug that leads to nasty … Continue reading

Posted in issue, Update, Windows | Tagged , , , , , | Leave a comment

On-premises sync for Active Directory (AD) users

How can Active Directory (AD) users synchronize Microsoft Edge favorites and settings between computers without connecting to Microsoft cloud services?

Posted in browser, Windows | Tagged , , | Leave a comment

Security: Microsoft buys the domain corp.com as a precaution

[German]Microsoft has acquired the domain Corp.com as a precautionary measure. The goal is to prevent the domain from being used by malicious parties to steal Windows credentials, monitor customer traffic, or deliver malicious files.

Posted in Security, Windows | Tagged , , , | Leave a comment

Microsoft Security Advisory (December 12, 2017)

[German]As part of the December patchday (12/12/2017), Microsoft has also issued a Microsoft Security Advisory Notification. It addresses the security settings for Active Directory Domain Services. And it's discusses the DDE vulnerability when opening Office documents.

Posted in Office, Security, Windows | Tagged , , , , | Leave a comment