Category Archives: Active Directory

Posted in Active Directory, Application Control, Desktop Lockdown, Least Privilege, Privilege Guard | Comments Off

Unsecured PCs Can Put Your Critical Infrastructure at Risk

In an ideal world, critical IT systems should never rely on the security of lesser devices. But in practice, computer networks are complicated and many dependencies exist, some of which are more desirable than others, and eliminating all unwanted dependencies … Continue reading

Posted in Active Directory, Group Policy, Least Privilege, Privilege Guard | Comments Off

Assigning admin privileges on Domain Controllers

Active Directory (AD) is the core of a Windows Server network and consists of a database that stores usernames and passwords, plus several technologies that work together to provide security and management services to clients and servers. Domain controllers (DCs) … Continue reading

Posted in Active Directory, Group Policy | Comments Off

What is the Right Amount of GPOs?

This is a question I get all the time, so I thought I’d take a moment and share some thoughts on this question. Before we get to “What is the right amount of GPOs”, let’s start off with “Can I … Continue reading

Posted in Active Directory, Group Policy, Privilege Guard | Comments Off

Deploying Privilege Guard with NetIQ GPA

Avecto Privilege Guard is implemented as a Group Policy Extension, which allows it to integrate seamlessly with solutions that enable advanced management of Group Policy. This includes Microsoft’s Advanced Group Policy Management (AGPM), which is part of the Microsoft Desktop … Continue reading

Posted in Active Directory, Group Policy | Comments Off

Embrace Group Policy, It Makes Sense…

It surprises me how few vendors use Active Directory Group Policy as a mechanism to centrally manage and deploy policy settings for their Windows based products, and instead build their own backend infrastructure for this purpose. I could rattle off … Continue reading