Ninjasta
Microsoft Identity, Enterprise Security & Automation
Insights from an italian bit worker
Active Directory
Articles about Microsoft Active Directory, including administration, identity management, authentication, hardening, privilege management and modern security practices.
-
Read More: Exchange and Active Directory: The Hidden Permissions Still Lurking in Your DomainExchange and Active Directory: The Hidden Permissions Still Lurking in Your Domain
posted
read in
3–5 minutesMicrosoft Exchange has always been one of the services most deeply integrated with Active Directory.And that’s exactly why it deserves more attention than it usually gets.When administrators think about Exchange,…
-
Read More: Shadow Admins in Active Directory: The Privilege You Don’t See (Until It’s Too Late)
Shadow Admins in Active Directory: The Privilege You Don’t See (Until It’s Too Late)
posted
read in
2–3 minutesEveryone monitors Domain Admins.Very few monitor Shadow Admins.Shadow Admins are accounts that are not members of privileged groups, yet still have enough delegated permissions to compromise an Active Directory environment.In…
-
Read More: Kerberoasting: How It Works, How to Defend, and How to Minimize the Damage
Kerberoasting: How It Works, How to Defend, and How to Minimize the Damage
posted
read in
11–17 minutesKerberos is one of the foundations of authentication in Active Directory.It allows users and services to authenticate securely without sending passwords across the network. It is reliable, scalable, and deeply…
-
Read More: Pass-the-Hash (PtH): Attack Technique and Complete Defenses
Pass-the-Hash (PtH): Attack Technique and Complete Defenses
posted
read in
3–5 minutesWhat is Pass-the-Hash? Pass-the-hash (PtH) is an attack technique that allows an attacker to authenticate to a remote system using the password hash, without the need for the password in…
-
Read More: Tiering in Active Directory: Effective Strategy to Increase Security and Resiliency
Tiering in Active Directory: Effective Strategy to Increase Security and Resiliency
posted
read in
2–4 minutesActive Directory (AD) is the beating heart of identity and IT asset management in many organizations. Being a critical system, the AD frequently becomes the target of cyber attacks aimed…
-
Read More: Migrating Your Windows Device from Active Directory to ENTRA ID
Migrating Your Windows Device from Active Directory to ENTRA ID
posted
read in
3–5 minutesTools and Techniques: Bridging the Gap Between Legacy and Modern IT It’s worth noting that the market offers several paid tools designed to ease this very transition. These solutions, though,…
-
Read More: Windows LAPS: Transition from Legacy to Modern Password Management
Windows LAPS: Transition from Legacy to Modern Password Management
posted
read in
3–4 minutesThe legacy Microsoft LAPS product is deprecated as of Windows 11 23 H2 and later.The installation of the legacy Microsoft LAPS MSI package is blocked on newer versions of the…