[blog]

The authority on identity and security in Microsoft

Does securing your business keep you up at night? Sleep better staying in the know – read our experts’ unique takes on trends in cybersecurity. 

AD Roles: Enterprise Admins and Schema Admins

The first domain in an AD forest is unique. There are two groups in this domain that we must be aware of: Enterprise Admins and Schema Admins. [...]

Protect Your Windows Network from the PetitPotam Exploit

The PetitPotam exploit can be used to completely own an environment, with very few prerequisites—but mitigation is within reac [...]

Entra ID Connect Installation Strategies

If organizations don’t properly plan the synchronization solution for their cloud identities, which Microsoft calls Azure AD Connect, users will have poor experiences in the cloud. Because identity is central [...]

Where to Host Active Directory FSMO Roles

The size and complexity of the organization are critical factors when determining how and where to host FSMO roles. [...]

4 Essential Practices for Automating the Termination of Hybrid Users

When an identity from Active Directory (AD) is synchronized with a cloud-based identity platform such as Azure AD, those identities are classified as being hybrid. When user accounts are terminated [...]

Components of a PKI, Part 5: Hardware Security Modules

Not all organizations require their own PKI solution; however, most leverage Microsoft Active Directory Certificate Services because it integrates directly with their existing Active Directory environment... [...]

Components of a PKI, Part 4: AD Certificate Services

Not all organizations require their own PKI solution; however, most leverage Microsoft Active Directory Certificate Services because it integrates directly with their existing Active Directory environment... [...]

Components of a PKI, Part 1: Digital Certificates

Digital certificates (most commonly represented by the X.509 public key certificate standard) are signed data objects that associate a public key with an individual user, device, or entity. In this [...]

Components of a PKI, Part 3: Certificate Revocation

One important function of Certificate Authorities that’s mentioned briefly in Part 2 of our “Components of a PKI” blog series is the ability to perform certificate revocation, or the CA’s [...]

Components of a PKI, Part 2: Certificate Authorities and CA Hierarchies

In Part 1 of our “Components of a PKI” blog series, we defined several PKI terms that are useful for understanding Certificate Authorities (CAs—also known as Certification Authorities) and CA [...]

4 Best Practices for Hybrid Identity Attributes in Active Directory

User attributes are important metadata that should be treated with care. Some organizations do not take user attributes seriously enough, which creates problems when the company tries to automate system [...]

Microsoft Information Protection, Part 2: Planning Sensitivity Label Deployment

Planning for a Microsoft Information Protection deployment can seem complicated at first; however, the recommendations in this article can help guide you in the right direction. An efficient design will [...]