It is extremely common for a company to hire employees in mass. It might be a school with a new school year, a corporation hiring...
Delegating “Disabling of Active Directory Users” to a Department Manager
We all know it happens the exact same way each time. There is a user in a department, or maybe a department of users, that are going to be terminated. The...
Going Deep With Nested Group Audits
It is one of the top three most complex areas of auditing: nested groups! You know, you find a group listed on an access control...
Tracking Down Users with no Logon Script Configuration
When users are created in Active Directory, the logon script configuration often fails to get configured. This can be due to a lack of process, a lack of restraint (i.e.,...
How to Track Down Inactive Users in Active Directory
We can all fall behind on our “simple” tasks in lieu of accomplishing more difficult duties. One such task is staying on top of user accounts in Active Directory...
Auditing with Advanced Audit Policy Configuration
Within the confines of the Windows Server environment lies the Group Policy settings, which are the security configuration powerhouses controlling every security event. The legacy...
How to Find Active Directory Accounts with Expiring Passwords
Every organization has one or more user accounts — used for services, applications, development, kiosks, or even standard employees — which need to ensure the...
Automating Privileged Group Modifications in Active Directory
Every single administrator and auditor I know is concerned about privileged groups in Active Directory being changed incorrectly. On the flip side, not one administrator...
Domain password policies: Configuring and auditing correctly!
Over the past 14 years, I have been around the world helping admins, auditors, and security professionals understand how the domain password policy works in...