Active Directory Tips 💡 @ADTipsTricks

Regular dose of #ActiveDirectory useful tips, tricks, lifehacks, best practices and interesting facts brought to you by https://t.co/Dildccmds5 adaxes.com Joined April 2015

Tweets

835
Followers

4K
Following

1K
Likes

16

Active Directory Tips 💡 @ADTipsTricks

5 years ago

If you've been waiting for the right moment to learn the true potential of scripting for #ActiveDirectory, this is it.

Softerra Adaxes @SofterraAdaxes

5 years ago

If you've been waiting for the right moment to learn the true potential of scripting for #ActiveDirectory, this is it.

1 2 3 0 1

Download Image

0 2 5 0 2

Active Directory Tips 💡 @ADTipsTricks

6 years ago

Did you know? Using only the default audit policies is below the recommended Microsft security baseline. Enable the Advanced Audit Policy Configuration to collect granular information about events in your AD.

0 6 23 0 1

Softerra Adaxes @SofterraAdaxes

6 years ago

Did you know? Using a role-based access control model to assign permissions is more efficient and flexible than managing access control lists (ACLs) across #ActiveDirectory. Here's how it works in Adaxes: youtu.be/0dDVfdBrx_E via @YouTube

0 3 4 0 0

Active Directory Tips 💡 @ADTipsTricks

6 years ago

Review and revoke unnecessary access privileges of service accounts in your #ActiveDirectory. Service accounts are usually prime targets for malicious actors.

0 4 14 0 1

Active Directory Tips 💡 @ADTipsTricks

6 years ago

To start the week, here is an AD security tip: Block web browsing on domain controllers and, ideally, block access to the internet altogether. But don't forget about intersite replication traffic - implement secure connections for that.

0 2 18 0 1

Active Directory Tips 💡 @ADTipsTricks

6 years ago

A quick tip for organizing your AD: having naming conventions for each AD object type can help identifying what the object is and what is its purpose just by looking at its name. You will be amazed how much information can fit in a few characters.

0 3 15 0 0

Softerra Adaxes @SofterraAdaxes

6 years ago

Want to automate the provisioning of #Exchange mailboxes? What about being able to manage #ActiveDirectory and Exchange from the same web interface? With Adaxes, it’s not a dream, it’s reality! youtu.be/TEhLD9qs0LA via @YouTube

0 2 1 0 0

Active Directory Tips 💡 @ADTipsTricks

6 years ago

Need ideas on what to do with an empty backlog? Automate #Exchange mailbox provisioning and #Office365 license management with PowerShell or some other means. It will save you a lot of time later.

0 1 4 0 0

Active Directory Tips 💡 @ADTipsTricks

6 years ago

User accounts with privileged access rights should have more complicated passwords than ordinary user accounts. Configure the fine-grained password policies accordingly.

1 1 9 0 0

Active Directory Tips 💡 @ADTipsTricks

6 years ago

Although multi-forest configurations are possible, it is not recommended to intentionally plan and implement such configurations unless you have special security or autonomy requirements.

1 0 7 0 0

Active Directory Tips 💡 @ADTipsTricks

6 years ago

Regularly check that you have no empty groups without purpose and that all groups have correct owners assigned to them.

1 2 8 0 0

Active Directory Tips 💡 @ADTipsTricks

6 years ago

If your organization grows and more domains or even forests are added, keep trust relationships in check and well-documented. Having two-way transitive trusts everywhere is not exactly secure.

0 2 9 0 0

Softerra Adaxes @SofterraAdaxes

6 years ago

With people working from home due to #Coronavirus outbreak, someone will inevitably forget their password. Having an offsite offline self-service password reset tool for #ActiveDirectory would be very useful, and Adaxes has got you covered. youtu.be/V5i53vD0lfI via @YouTube

0 1 8 0 1

Active Directory Tips 💡 @ADTipsTricks

6 years ago

Disable #GPO links instead of deleting GPOs if you are not sure. You don’t want to accidentally delete a GPO applied to several Organizational Units.

1 2 15 0 1

Active Directory Tips 💡 @ADTipsTricks

6 years ago

Storing all domain controllers in the built-in Domain Controllers OU is considered best practice by #Microsoft. Having a child OU for each site is even better.

5 4 16 0 1

Active Directory Tips 💡 @ADTipsTricks

6 years ago

Make sure that you deny local logon for service accounts and only allow logon as a service. It shuts down a potent attack vector.

0 3 17 0 2

Active Directory Tips 💡 @ADTipsTricks

6 years ago

You servers and workstations are likely to need different GPOs. Always keep servers and workstations in different OUs for ease of maintenance.

0 3 14 0 0

Active Directory Tips 💡 @ADTipsTricks

6 years ago

Might be obvious for some, but... Never assign resource access permissions to individual accounts. You will quickly lose track of who has access to what. Use security groups instead.

0 5 11 0 0

Active Directory Tips 💡 @ADTipsTricks

6 years ago

User lifecycle management is the first thing you should automate in your #ActiveDirectory. It will save you the most time. Check out how Adaxes can help you and tell us what you think youtu.be/EaunkbPnp0I via @YouTube