10 Tips for Securing Active Directory Environments

Managing accounts with a security-first approach will help to avoid costly incursions.


Sources:

Comments

Post a Comment

Popular posts from this blog

SQL Server Setup: Windows Firewall warning (Ports)

Image
What was it again SQL server setup throws out, when you have your Windows Firewall on?! Rule "Windows Firewall" generated a warning. The Windows Firewall is enabled. Make sure the appropriate ports are open to enable remote access. See the rules documentation at http://go.microsoft.com/fwlink/?LinkId=94001 for information about ports to open for each feature. Keywords: Setup, Firewall, Ports, SQL Server, Microsoft
Read more

Active Directory Sizing and Capacity Planning

Sizing discussions can range from exact numbers to the vague statement of "it depends [on the usage/applications/...]". But even an "it depends"-discussion has to start with some bare numbers as a basis. Harddisk (Storage/Database Size) 40KB to 60KB for each user RAM Database Size Base operating system recommendations (SYSVOL) Third-party applications (Anti-Virus, Monitoring, Backup, ...) Storage/Database Size 40KB to 60KB for each user Network 1 Gb CPU 1000 concurrent users for each core It is recommended to size in cycles, such as through "a three step process [that] will be used as part of the capacity planning cycle." Measure the existing environment, determine where the system bottlenecks currently are, and get environmental basics necessary to plan the amount of capacity needed. Determine the hardware needed according to the criteria outlined in step 1. Monitor and validate that...
Read more

How to install a Root Certification Authority - Step-by-step

"The root of the trust chain in any PKI is the Root Certification Authority." For security reasons the machine that you will be using is an isolated / standalone / non-domain joined machine. You want to limit access to this machine as much as possible. The function of the Root CA is to "generate the server certificates that will be installed on the subordinate CAs. And those subordinate CAs will actually distribute user and computer certificates." Note that the default hash algorithm SHA-1 has been flagged as weak meanwhile. As this will be the root CA you can and should go for something strong like SHA512 and a key length of 4096 bits. Sources: Installing a Two Tier PKI Hierarchy in Windows Server 2012: Part II, Installing a Root Certification Authority with the GUI Step by Step Install Root Certificate Authority on Windows Server 2012 R2 Designing and Implementing a PKI: Part II Implementation Phases and Certificate Authority Installation TechNet ...
Read more