{"id":57378,"date":"2024-03-22T09:55:00","date_gmt":"2024-03-22T09:55:00","guid":{"rendered":"https:\/\/infrasos.com\/?p=57378"},"modified":"2024-03-18T17:42:43","modified_gmt":"2024-03-18T17:42:43","slug":"active-directory-security-checklist-ensure-your-system-is-fortified","status":"publish","type":"post","link":"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/","title":{"rendered":"Active Directory Security Checklist: Ensure Your System is Fortified"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"57378\" class=\"elementor elementor-57378\">\n\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e5b4cac e-con-boxed e-con\" data-id=\"e5b4cac\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-43a7626 elementor-widget elementor-widget-text-editor\" data-id=\"43a7626\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p>Active Directory Security Checklist: Ensure Your System is Fortified. Active Directory (AD) is a common target during <a href=\"https:\/\/infrasos.com\/how-to-protect-windows-server-malware-ransomware-ddos-attacks-other-threats\/\">cybersecurity attacks<\/a> for several compelling reasons. AD serves as a primary authentication and authorization service in <a href=\"https:\/\/infrasos.com\/how-to-implement-compliance-governance-policies-for-windows-server\/\">Windows environments<\/a>. Compromising AD allows attackers to gain control over <a href=\"https:\/\/infrasos.com\/what-is-windows-event-log-id-4740-a-user-account-was-locked-out\/\">user accounts<\/a>, <a href=\"https:\/\/infrasos.com\/active-directory-password-reset-tool-self-service-portal\/\">passwords<\/a>, and <a href=\"https:\/\/infrasos.com\/securing-remote-access-to-active-directory\/\">access permissions<\/a>, providing a gateway to the entire network.<\/p><p>Additionally, compromising AD provides attackers with a persistent presence within the network. As Active Directory is used for establishing trust relationships between <a href=\"https:\/\/infrasos.com\/active-directory-forest-vs-domain-whats-the-difference\/\">domains<\/a> compromising of one domain means compromising of all domains it has trust with.<\/p><p>Furthermore, many regulatory frameworks and industry standards, such as<a href=\"https:\/\/infrasos.com\/gdpr-compliance-checklist-audit-requirements-explained\/\"> GDPR<\/a>, HIPAA, and PCI DSS, require organizations to implement security measures to protect sensitive data.\u00a0<\/p><p>Therefore,<a href=\"https:\/\/infrasos.com\/domain-controller-security-best-practices-hardening-checklist\/\"> securing domain controllers<\/a> is critical element of the reliable cyber defence strategy. One of the methods\u00a0 is to apply a checklist. \u2013 Create a list of items that should be configured the proper way to ensure the <a href=\"https:\/\/infrasos.com\/the-role-of-threat-intelligence-in-active-directory-security\/\">security of AD<\/a>, then perform assessment of the existing configuration. As AD is a complex system, divide the list into several categories.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-69dd3a9 e-con-boxed e-con\" data-id=\"69dd3a9\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-423daf6 elementor-widget elementor-widget-image\" data-id=\"423daf6\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/0041.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Active Directory Security Checklist: Ensure Your System is Fortified\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTczODAsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjRcLzAzXC8wMDQxLnBuZyJ9\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"318\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/0041-768x318.png\" class=\"attachment-medium_large size-medium_large wp-image-57380\" alt=\"Active Directory Security Checklist: Ensure Your System is Fortified\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/0041-768x318.png 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/0041-300x124.png 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/0041-1024x423.png 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/0041-720x298.png 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/0041.png 1294w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c4fc9a4 e-con-boxed e-con\" data-id=\"c4fc9a4\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-95c11ff elementor-widget elementor-widget-text-editor\" data-id=\"95c11ff\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/active-directory-security-best-practices-protecting-your-environment\/\">Active Directory Security Best Practices: Protect Your Environment<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4772cb8 elementor-widget elementor-widget-heading\" data-id=\"4772cb8\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h2 class=\"elementor-heading-title elementor-size-default\">Account Security<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fd25944 elementor-widget elementor-widget-text-editor\" data-id=\"fd25944\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>As Active Directory Domain Services works as an identity provider, the security planning should have the prevention of the credential theft. During the security assessment, you should review2 areas related to the credential theft \u2013 preventive measures and damage reduction measures. Preventive measures may include:<\/p><ul><li>Usage of separate administrative accounts. Usually applied for the personnel that have high system privileges, such as Domain Administrator or Enterprise Administrators. Users (usually from IT department) have two separate accounts \u2013 the regular one, used for email access and other daily activities, and the privileged one, which is assigned administrative permissions. Since the privileged account is rarely used has many usage restrictions, the risk of credential theft is minimized.<\/li><li>Usage of separate hosts for the administrative access. Usually used in addition for previous one. For the privileged accounts, log in to the regular workstations is forbidden, they are only used to login to a separate host which is highly protected, don\u2019t have any unnecessary software and are carefully maintained. Typically, these hosts are monitored for any security-related events and require secure authentication methods, such as authentication using smart-cards. For more details about deploying secure administrative hosts, see <a href=\"https:\/\/learn.microsoft.com\/en-us\/windows-server\/identity\/ad-ds\/plan\/security-best-practices\/implementing-secure-administrative-hosts\" target=\"_blank\" rel=\"noopener\">Implementing Secure Administrative Hosts<\/a>.<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8fe0657 elementor-widget elementor-widget-image\" data-id=\"8fe0657\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/006-1.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Secure Host for connections\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTczODYsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjRcLzAzXC8wMDYtMS5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/elementor\/thumbs\/006-1-qkkyxd34nb23fj5raljs9mbwfaj7ko5snctgan7bns.png\" title=\"Secure Host for connections\" alt=\"Secure Host for connections\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fefd762 elementor-widget elementor-widget-text-editor\" data-id=\"fefd762\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li>Education of end users. This measure prevents credential theft of non-privileged accounts. Usually, it includes some formal awareness sessions and courses to teach users about tricks hackers used to steal the credentials. Accounts of users with executive roles within organization are most attractive and may become the victims of whaling attacks (more details about whaling is here <a href=\"https:\/\/www.kaspersky.com\/resource-center\/definitions\/what-is-a-whaling-attack\" target=\"_blank\" rel=\"noopener\">What is a Whaling Attack?<\/a>), therefore may require additional attention.<\/li><\/ul><p>Damage reduction measures help to minimize the damage in the scenario of the credential are actually stolen. The measures may include:<\/p><ul><li>Enforcement of<a href=\"https:\/\/infrasos.com\/implementing-mfa-in-microsoft-exchange-server\/\"> multi-factor authentication<\/a>. In case login and password was stolen, MFA not only reduces the damage, it completely prevents any harm by preventing the login without the second factor. For <a href=\"https:\/\/infrasos.com\/how-to-secure-active-directory-against-insider-threats\/\">securing Active Directory<\/a>, it is highly recommended to adopt MFA and enforce its usage for <a href=\"https:\/\/infrasos.com\/active-directory-reporting\/\">all users<\/a>.<\/li><li>Following the principle of least privilege. <a href=\"https:\/\/infrasos.com\/active-directory-auditing-for-regulatory-compliance-best-practices\/\">Principle of least privilege<\/a> (PoLP) should be followed during the provision of access to the systems and data.\u00a0<\/li><li>Usage of Just-in-time access. One of the most common security misconfiguration is assignment of privileged permissions on the permanent basis. Admin permissions must be assigned temporarily, only for the period they are actually used. In this case, the account doesn\u2019t have any privileges assigned for the most time, and in case of theft the damage is minimized.<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4e990cf elementor-widget elementor-widget-image\" data-id=\"4e990cf\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/IAM02.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Active Directory Security Checklist: Ensure Your System is Fortified  Just in time access\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTczODcsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjRcLzAzXC9JQU0wMi5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"623\" height=\"256\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/IAM02.png\" class=\"attachment-medium_large size-medium_large wp-image-57387\" alt=\"Active Directory Security Checklist: Ensure Your System is Fortified Just in time access\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/IAM02.png 623w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/IAM02-300x123.png 300w\" sizes=\"(max-width: 623px) 100vw, 623px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ca5895b elementor-widget elementor-widget-text-editor\" data-id=\"ca5895b\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/\">Securing LDAP Communications in Active Directory<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-95f4059 elementor-widget elementor-widget-heading\" data-id=\"95f4059\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Network Security<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-257526f elementor-widget elementor-widget-text-editor\" data-id=\"257526f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><a href=\"https:\/\/infrasos.com\/remove-demote-domain-controller-from-active-directory-guide\/\">Domain controllers<\/a> must be protected from the connections that can be used to get unauthorized access. Checklist must include but not limited to the following items:<\/p><ul><li>Inbound connections. No external inbound connections must be allowed to domain controllers. In case there is a need for authentication of external applications, additional tools like Active Directory Federation Services or <a href=\"https:\/\/infrasos.com\/detecting-security-incidents-with-microsoft-entra-id-auditing\/\">Microsoft Entra<\/a> ID must be used.<\/li><li>Firewall configuration. No extra network traffic must be allowed to and from domain controllers. The list of ports required for proper DC communication is here <a href=\"https:\/\/learn.microsoft.com\/en-us\/troubleshoot\/windows-server\/active-directory\/config-firewall-for-ad-domains-and-trusts\" target=\"_blank\" rel=\"noopener\">How to configure a firewall for Active Directory domains and trusts<\/a>, all other traffic must be blocked, especially access to Internet.<\/li><li>Remote connections must be restricted. For most of the administrative tasks, there is no need for direct connection to the domain controller, they may be performed remotely. Remote Desktop Protocol must be allowed only from the trusted machines, such as jump servers, and only to the limited set of user accounts.<\/li><li><a href=\"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/\">LDAP<\/a> traffic encryption. Enable LDAP over TLS \u2013 that way server uses encrypted LDAP queries from the clients. To enforce the encryption you need to place the proper TLS certificate to the personal certificate store of the domain controller and enable policies that restrict the usage of unencrypted LDAP traffic. For more details, see <a href=\"https:\/\/learn.microsoft.com\/en-us\/troubleshoot\/windows-server\/active-directory\/enable-ldap-over-ssl-3rd-certification-authority\" target=\"_blank\" rel=\"noopener\">Enable LDAP over SSL with a third-party certification authority<\/a>.<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-15aaf33 elementor-widget elementor-widget-template\" data-id=\"15aaf33\" data-element_type=\"widget\" data-widget_type=\"template.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-template\">\n\t\t\t\t\t<div data-elementor-type=\"section\" data-elementor-id=\"6120\" class=\"elementor elementor-6120\">\n\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3bf9918d elementor-section-content-middle ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"3bf9918d\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-extended\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-1f0b95f7 ot-flex-column-vertical\" data-id=\"1f0b95f7\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-48217ba4 elementor-widget elementor-widget-image\" data-id=\"48217ba4\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"113\" height=\"101\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/05\/InfraSOS-Logo-Icon-1.png\" class=\"attachment-full size-full wp-image-5788\" alt=\"InfraSOS-AD-Tools\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-18c09f39 ot-flex-column-vertical\" data-id=\"18c09f39\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5c5ff336 elementor-widget elementor-widget-heading\" data-id=\"5c5ff336\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Try InfraSOS for FREE<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-49bc2953 elementor-widget elementor-widget-text-editor\" data-id=\"49bc2953\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Try InfraSOS Active Directory, Azure AD &amp; Office 365 Reporting &amp; Auditing Tool<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-595c47f1 elementor-button-align-center elementor-invisible elementor-widget elementor-widget-global elementor-global-5815 elementor-widget-form\" data-id=\"595c47f1\" data-element_type=\"widget\" data-settings=\"{&quot;button_width&quot;:&quot;50&quot;,&quot;step_next_label&quot;:&quot;Next&quot;,&quot;step_previous_label&quot;:&quot;Previous&quot;,&quot;_animation&quot;:&quot;pulse&quot;,&quot;step_type&quot;:&quot;none&quot;,&quot;step_icon_shape&quot;:&quot;circle&quot;}\" data-widget_type=\"form.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor-pro - v3.10.3 - 29-01-2023 *\/\n.elementor-button.elementor-hidden,.elementor-hidden{display:none}.e-form__step{width:100%}.e-form__step:not(.elementor-hidden){display:flex;flex-wrap:wrap}.e-form__buttons{flex-wrap:wrap}.e-form__buttons,.e-form__buttons__wrapper{display:flex}.e-form__indicators{display:flex;justify-content:space-between;align-items:center;flex-wrap:nowrap;font-size:13px;margin-bottom:var(--e-form-steps-indicators-spacing)}.e-form__indicators__indicator{display:flex;flex-direction:column;align-items:center;justify-content:center;flex-basis:0;padding:0 var(--e-form-steps-divider-gap)}.e-form__indicators__indicator__progress{width:100%;position:relative;background-color:var(--e-form-steps-indicator-progress-background-color);border-radius:var(--e-form-steps-indicator-progress-border-radius);overflow:hidden}.e-form__indicators__indicator__progress__meter{width:var(--e-form-steps-indicator-progress-meter-width,0);height:var(--e-form-steps-indicator-progress-height);line-height:var(--e-form-steps-indicator-progress-height);padding-right:15px;border-radius:var(--e-form-steps-indicator-progress-border-radius);background-color:var(--e-form-steps-indicator-progress-color);color:var(--e-form-steps-indicator-progress-meter-color);text-align:right;transition:width .1s linear}.e-form__indicators__indicator:first-child{padding-left:0}.e-form__indicators__indicator:last-child{padding-right:0}.e-form__indicators__indicator--state-inactive{color:var(--e-form-steps-indicator-inactive-primary-color,#c2cbd2)}.e-form__indicators__indicator--state-inactive [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-inactive-secondary-color,#fff)}.e-form__indicators__indicator--state-inactive object,.e-form__indicators__indicator--state-inactive svg{fill:var(--e-form-steps-indicator-inactive-primary-color,#c2cbd2)}.e-form__indicators__indicator--state-active{color:var(--e-form-steps-indicator-active-primary-color,#39b54a);border-color:var(--e-form-steps-indicator-active-secondary-color,#fff)}.e-form__indicators__indicator--state-active [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-active-secondary-color,#fff)}.e-form__indicators__indicator--state-active object,.e-form__indicators__indicator--state-active svg{fill:var(--e-form-steps-indicator-active-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed{color:var(--e-form-steps-indicator-completed-secondary-color,#fff)}.e-form__indicators__indicator--state-completed [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-completed-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed .e-form__indicators__indicator__label{color:var(--e-form-steps-indicator-completed-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed .e-form__indicators__indicator--shape-none{color:var(--e-form-steps-indicator-completed-primary-color,#39b54a);background-color:initial}.e-form__indicators__indicator--state-completed object,.e-form__indicators__indicator--state-completed svg{fill:var(--e-form-steps-indicator-completed-secondary-color,#fff)}.e-form__indicators__indicator__icon{width:var(--e-form-steps-indicator-padding,30px);height:var(--e-form-steps-indicator-padding,30px);font-size:var(--e-form-steps-indicator-icon-size);border-width:1px;border-style:solid;display:flex;justify-content:center;align-items:center;overflow:hidden;margin-bottom:10px}.e-form__indicators__indicator__icon img,.e-form__indicators__indicator__icon object,.e-form__indicators__indicator__icon svg{width:var(--e-form-steps-indicator-icon-size);height:auto}.e-form__indicators__indicator__icon .e-font-icon-svg{height:1em}.e-form__indicators__indicator__number{width:var(--e-form-steps-indicator-padding,30px);height:var(--e-form-steps-indicator-padding,30px);border-width:1px;border-style:solid;display:flex;justify-content:center;align-items:center;margin-bottom:10px}.e-form__indicators__indicator--shape-circle{border-radius:50%}.e-form__indicators__indicator--shape-square{border-radius:0}.e-form__indicators__indicator--shape-rounded{border-radius:5px}.e-form__indicators__indicator--shape-none{border:0}.e-form__indicators__indicator__label{text-align:center}.e-form__indicators__indicator__separator{width:100%;height:var(--e-form-steps-divider-width);background-color:#c2cbd2}.e-form__indicators--type-icon,.e-form__indicators--type-icon_text,.e-form__indicators--type-number,.e-form__indicators--type-number_text{align-items:flex-start}.e-form__indicators--type-icon .e-form__indicators__indicator__separator,.e-form__indicators--type-icon_text .e-form__indicators__indicator__separator,.e-form__indicators--type-number .e-form__indicators__indicator__separator,.e-form__indicators--type-number_text .e-form__indicators__indicator__separator{margin-top:calc(var(--e-form-steps-indicator-padding, 30px) \/ 2 - var(--e-form-steps-divider-width, 1px) \/ 2)}.elementor-field-type-hidden{display:none}.elementor-field-type-html{display:inline-block}.elementor-login .elementor-lost-password,.elementor-login .elementor-remember-me{font-size:.85em}.elementor-field-type-recaptcha_v3 .elementor-field-label{display:none}.elementor-field-type-recaptcha_v3 .grecaptcha-badge{z-index:1}.elementor-button .elementor-form-spinner{order:3}.elementor-form .elementor-button>span{display:flex;justify-content:center;align-items:center}.elementor-form .elementor-button .elementor-button-text{white-space:normal;flex-grow:0}.elementor-form .elementor-button svg{height:auto}.elementor-form .elementor-button .e-font-icon-svg{height:1em}.elementor-select-wrapper .select-caret-down-wrapper{position:absolute;top:50%;transform:translateY(-50%);inset-inline-end:10px;pointer-events:none;font-size:11px}.elementor-select-wrapper .select-caret-down-wrapper svg{display:unset;width:1em;aspect-ratio:unset;fill:currentColor}.elementor-select-wrapper .select-caret-down-wrapper i{font-size:19px;line-height:2}.elementor-select-wrapper.remove-before:before{content:\"\"!important}<\/style>\t\t<form class=\"elementor-form\" method=\"post\" name=\"InfraSOS Email Capture\">\n\t\t\t<input type=\"hidden\" name=\"post_id\" value=\"6120\"\/>\n\t\t\t<input type=\"hidden\" name=\"form_id\" value=\"595c47f1\"\/>\n\t\t\t<input type=\"hidden\" name=\"referer_title\" value=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n\n\t\t\t\n\t\t\t<div class=\"elementor-form-fields-wrapper elementor-labels-above\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-type-email elementor-field-group elementor-column elementor-field-group-email elementor-col-50 elementor-field-required\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<input size=\"1\" type=\"email\" name=\"form_fields[email]\" id=\"form-field-email\" class=\"elementor-field elementor-size-lg  elementor-field-textual\" placeholder=\"Enter your email address\" required=\"required\" aria-required=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-group elementor-column elementor-field-type-submit elementor-col-50 e-form__buttons\">\n\t\t\t\t\t<button type=\"submit\" class=\"elementor-button elementor-size-lg\">\n\t\t\t\t\t\t<span >\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\" elementor-button-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Try InfraSOS FREE<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/button>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/form>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4772ed8c elementor-icon-list--layout-inline elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"4772ed8c\" data-element_type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<link rel=\"stylesheet\" href=\"https:\/\/infrasos.com\/wp-content\/plugins\/elementor\/assets\/css\/widget-icon-list.min.css\">\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-arrow-up\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Free 15-Days Trial<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">SaaS AD Reporting & Auditing Solution<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e2404fe elementor-widget elementor-widget-text-editor\" data-id=\"e2404fe\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/active-directory-reporting\/\">Find out what your user&#8217;s are upto with Active Directory Reporting Tool<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a785ed8 elementor-widget elementor-widget-heading\" data-id=\"a785ed8\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Operating System Security<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-aa0e364 elementor-widget elementor-widget-heading\" data-id=\"aa0e364\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Operating System Patching<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b21e509 elementor-widget elementor-widget-text-editor\" data-id=\"b21e509\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>One of the mandatory items for Active Directory Security Checklist is to ensure whether all your domain controllers running on supported Operating System (OS). To check it, go to <a href=\"https:\/\/learn.microsoft.com\/en-us\/lifecycle\/products\/\" target=\"_blank\" rel=\"noopener\">Search Product and Services Lifecycle Information<\/a> webpage and find the OS you use.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-83b0030 elementor-widget elementor-widget-image\" data-id=\"83b0030\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/003.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Operating System end of support\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTczOTEsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjRcLzAzXC8wMDMucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"196\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/003-768x196.png\" class=\"attachment-medium_large size-medium_large wp-image-57391\" alt=\"Operating System end of support\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/003-768x196.png 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/003-300x77.png 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/003-720x184.png 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/003.png 1007w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9abedb3 elementor-widget elementor-widget-text-editor\" data-id=\"9abedb3\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Here <strong>Mainstream End Date<\/strong> means the date when the OS stops receiving new features \u2013 this one is safe to skip. <strong>Extended End Date<\/strong> defines the date when OS stops receiving the<a href=\"https:\/\/infrasos.com\/microsoft-exchange-server-security-audits-detailed-guide\/\"> security patches<\/a> \u2013 this date is the critical one. Ensure you upgrade all your domain controllers before this date. In case the upgrade is impossible, purchase the extended security updates or deploy Azure Arc.<\/p><p>After ensuring all your servers get the new security patches, examine whether patches are installed in time. Patches are released on the 2nd Tuesday of each month. Patch deployment must be documented in the patch management procedure and should be strictly followed.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4093cf9 elementor-widget elementor-widget-heading\" data-id=\"4093cf9\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Attack Surface Reduction<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7bdbba7 elementor-widget elementor-widget-text-editor\" data-id=\"7bdbba7\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>No extra software\u00a0 to be presented on server running Active Directory Domain Controller role. Ideally, the server must only have the following components:<\/p><ul><li><a href=\"https:\/\/infrasos.com\/how-to-monitor-and-audit-your-windows-server-for-security-events\/\">Windows Server Core<\/a> edition. Desktop environment is unnecessary, it increases the attack surface, requires extra resources and encourages administrator to connect to the server using RDP to perform tasks they could easily do remotely.<\/li><li>Only Active Directory Domain Controller role installed. DC servers should be single-purpose machines, presence of other roles is not recommended.<\/li><li>Only antivirus software is installed. Presence of third-party software is not recommended, because vulnerabilities in installed applications can be used by attackers to access the server. <a href=\"https:\/\/infrasos.com\/azure-vm-security-antivirus-patching-endpoint-protection\/\">Antivirus<\/a> is the only acceptable exclusion from this rule.<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d47a47c elementor-widget elementor-widget-image\" data-id=\"d47a47c\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/005.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Single purpose server\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTczOTIsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjRcLzAzXC8wMDUucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/elementor\/thumbs\/005-qkkzpcq2xulm03onrux4xl1okut9ec1ijl2mmtr096.png\" title=\"Single purpose server\" alt=\"Single purpose server\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-701165a elementor-widget elementor-widget-text-editor\" data-id=\"701165a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/active-directory-password-reset-tool-self-service-portal\/\">Make it easier with Active Directory Password Reset Tool \u2013 Self Service Portal<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b0b7097 elementor-widget elementor-widget-heading\" data-id=\"b0b7097\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Malware Protection<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3871fcb elementor-widget elementor-widget-text-editor\" data-id=\"3871fcb\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li>Antivirus presence. Antivirus software must be installed and reliable. Additionally, install <a href=\"https:\/\/infrasos.com\/how-to-protect-windows-server-malware-ransomware-ddos-attacks-other-threats\/\">threat detection system<\/a> (for example <a href=\"https:\/\/learn.microsoft.com\/en-us\/defender-for-identity\/what-is\" target=\"_blank\" rel=\"noopener\">Microsoft Defender for Identity<\/a>)<\/li><li>Antivirus maintenance. Ensure, antivirus is properly maintained and receives feature and signature updates in time, is properly configured, etc. For example, it is recommended by Microsoft (in the <a href=\"https:\/\/support.microsoft.com\/en-au\/topic\/virus-scanning-recommendations-for-enterprise-computers-that-are-running-windows-or-windows-server-kb822158-c067a732-f24a-9079-d240-3733e39b40bc\" target=\"_blank\" rel=\"noopener\">Virus scanning recommendations for Enterprise computers that are running Windows or Windows Server<\/a>) to exclude SYSVOL and NTDS database from antivirus scanning.<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d7ed434 elementor-widget elementor-widget-heading\" data-id=\"d7ed434\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Monitoring<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-52fe524 elementor-widget elementor-widget-text-editor\" data-id=\"52fe524\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Security<a href=\"https:\/\/infrasos.com\/view-active-directory-ad-event-logs-and-what-they-track\/\"> event log<\/a> of all domain controllers must be monitored for the specific events. Configure audit policy to log the events related to identity-related activities (e.g. enable policies for Audit Security Group Management, Audit User Account Management, Audit Logon, etc., the full list is found in <a href=\"https:\/\/learn.microsoft.com\/en-us\/windows-server\/identity\/ad-ds\/plan\/security-best-practices\/audit-policy-recommendations\" target=\"_blank\" rel=\"noopener\">Audit Policy Recommendations<\/a>) and to directory-related activities (Audit Directory Service, Audit Directory Service Changes).<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-76fe523 elementor-widget elementor-widget-text-editor\" data-id=\"76fe523\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/securing-remote-access-to-active-directory\/\">Securing Remote Access to Active Directory<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d00f5c9 elementor-widget elementor-widget-heading\" data-id=\"d00f5c9\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Server Security<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9417424 elementor-widget elementor-widget-text-editor\" data-id=\"9417424\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Servers that have the domain controller role must be protected no matter you use physical or virtual servers. Include the following items to the Active Directory security checklist:<\/p><ul><li>Datacenter\/Server Room physical security. Does the physical location where domain controllers are placed have proper physical security measures? If proper physical security cannot be provided in some locations (remote\/branch offices), ensure only read-only domain controllers are located there.<\/li><li>Disk drive encryption. Ensure all domain controllers have proper <a href=\"https:\/\/infrasos.com\/secure-your-data-with-windows-server-encryption-bitlocker\/\">BitLocker<\/a> Drive Encryption configuration and all the data is encrypted at rest. Since encryption is not possible for SAN\/NAS storages, for domain controllers locally attached storages are preferable.<\/li><li>Virtual infrastructure security. In case domain controllers are running on virtual machines, ensure that virtual infrastructure is secured. PoLP must be applied to the accounts used for virtualization administration, host machines must be patched regularly, and the vendor\u2019s security best practices must be followed.<\/li><li>Backup infrastructure security. Ensure that the used backup solution supports encryption at both rest and transition, and that the backup storage room has the proper physical security.<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-19483de elementor-widget elementor-widget-text-editor\" data-id=\"19483de\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>I hope you found Active Directory Security Checklist: Ensure Your System is Fortified article very useful. Let&#8217;s conclude this article&#8217;s thought&#8217;s.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-45dd4bf elementor-widget elementor-widget-text-editor\" data-id=\"45dd4bf\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/how-to-secure-active-directory-against-insider-threats\/\">How to Secure Active Directory Against Insider Threats<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-aeb68c2 elementor-widget elementor-widget-heading\" data-id=\"aeb68c2\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-large\">Active Directory Security Checklist: Ensure Your System is Fortified Conclusion<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-45c8d3b e-con-boxed e-con\" data-id=\"45c8d3b\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5b1864b elementor-widget elementor-widget-text-editor\" data-id=\"5b1864b\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>In conclusion, safeguarding AD is critical for ensuring the overall security and resilience of an organization&#8217;s IT infrastructure. The provided checklist covers key aspects of AD security, emphasizing the implementation of measures to protect against various cyber threats.<\/p><p>The checklist begins with a focus on Account Security, recognizing that AD&#8217;s role as an identity provider makes credential theft a significant concern. Preventive measures, such as using separate administrative accounts and hosts, educating end-users, and enforcing multi-factor authentication, are vital for minimizing the risk of unauthorized access.<\/p><p>Network Security is addressed through measures like restricting inbound connections, <a href=\"https:\/\/infrasos.com\/configure-and-manage-windows-firewall-for-your-windows-server\/\">configuring firewalls<\/a>, and implementing secure LDAP traffic encryption. These actions help safeguard domain controllers from unauthorized access and ensure the integrity of communication within the network.<\/p><p>Operating System Security is critical, emphasizing the importance of keeping the domain controller up to date by regular patching of OS and third-party components, and recommendations for keeping the attack surface as small as possible. The checklist also underscores the significance of monitoring security event logs to detect and respond to identity-related activities effectively.<\/p><p>Server Security considerations include physical security, disk drive encryption, and securing virtual and backup infrastructures. Attention to these aspects ensures that domain controllers, whether physical or virtual, are resilient against various attack vectors.<\/p><p>Additionally, each IT engineer should understand that no matter how comprehensive your checklist is, there is always a possibility for the Active Directory compromise, and you should be ready for it. It is considered as a good practice to have a detailed incident response plan that can be used in scenario of successful cyber-attack. To create a plan, you can use Microsoft article <a href=\"https:\/\/learn.microsoft.com\/en-us\/windows-server\/identity\/ad-ds\/plan\/security-best-practices\/planning-for-compromise\" target=\"_blank\" rel=\"noopener\">Planning for Compromise<\/a> as a baseline.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-4a7b382f elementor-section-content-middle ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"4a7b382f\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-extended\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-67445f34 ot-flex-column-vertical\" data-id=\"67445f34\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a22b7d9 elementor-widget elementor-widget-image\" data-id=\"a22b7d9\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"113\" height=\"101\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/05\/InfraSOS-Logo-Icon-1.png\" class=\"attachment-full size-full wp-image-5788\" alt=\"InfraSOS-AD-Tools\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-208d0ee1 ot-flex-column-vertical\" data-id=\"208d0ee1\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-67afedb6 elementor-widget elementor-widget-heading\" data-id=\"67afedb6\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Try InfraSOS for FREE<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3fc8300d elementor-widget elementor-widget-text-editor\" data-id=\"3fc8300d\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Try InfraSOS Active Directory, Azure AD &amp; Office 365 Reporting &amp; Auditing Tool<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6312c0d elementor-button-align-center elementor-invisible elementor-widget elementor-widget-global elementor-global-5815 elementor-widget-form\" data-id=\"6312c0d\" data-element_type=\"widget\" data-settings=\"{&quot;button_width&quot;:&quot;50&quot;,&quot;step_next_label&quot;:&quot;Next&quot;,&quot;step_previous_label&quot;:&quot;Previous&quot;,&quot;_animation&quot;:&quot;pulse&quot;,&quot;step_type&quot;:&quot;none&quot;,&quot;step_icon_shape&quot;:&quot;circle&quot;}\" data-widget_type=\"form.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<form class=\"elementor-form\" method=\"post\" name=\"InfraSOS Email Capture\">\n\t\t\t<input type=\"hidden\" name=\"post_id\" value=\"57378\"\/>\n\t\t\t<input type=\"hidden\" name=\"form_id\" value=\"6312c0d\"\/>\n\t\t\t<input type=\"hidden\" name=\"referer_title\" value=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n\n\t\t\t\n\t\t\t<div class=\"elementor-form-fields-wrapper elementor-labels-above\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-type-email elementor-field-group elementor-column elementor-field-group-email elementor-col-50 elementor-field-required\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<input size=\"1\" type=\"email\" name=\"form_fields[email]\" id=\"form-field-email\" class=\"elementor-field elementor-size-lg  elementor-field-textual\" placeholder=\"Enter your email address\" required=\"required\" aria-required=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-group elementor-column elementor-field-type-submit elementor-col-50 e-form__buttons\">\n\t\t\t\t\t<button type=\"submit\" class=\"elementor-button elementor-size-lg\">\n\t\t\t\t\t\t<span >\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\" elementor-button-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Try InfraSOS FREE<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/button>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/form>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7240895d elementor-icon-list--layout-inline elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"7240895d\" data-element_type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-arrow-up\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Free 15-Days Trial<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">SaaS AD Reporting & Auditing Solution<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Active Directory Security Checklist: Ensure Your System is Fortified. Active Directory (AD) is a common target during cybersecurity attacks for several compelling reasons. AD serves as a primary authentication and authorization service in Windows environments. Compromising AD allows attackers to gain control over user accounts, passwords, and access permissions, providing a gateway to the entire [&hellip;]<\/p>\n","protected":false},"author":14,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[33],"tags":[47,149,147,148],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Active Directory Security Checklist: Ensure Your System is Fortified<\/title>\n<meta name=\"description\" content=\"Active Directory Security Checklist: Ensure Your System is Fortified. Active Directory (AD) is a common target during cybersecurity attacks for several\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Active Directory Security Checklist: Ensure Your System is Fortified\" \/>\n<meta property=\"og:description\" content=\"Active Directory Security Checklist: Ensure Your System is Fortified. Active Directory (AD) is a common target during cybersecurity attacks for several\" \/>\n<meta property=\"og:url\" content=\"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/\" \/>\n<meta property=\"og:site_name\" content=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/infrasos\/\" \/>\n<meta property=\"article:published_time\" content=\"2024-03-22T09:55:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-03-18T17:42:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/0041-768x318.png\" \/>\n<meta name=\"author\" content=\"Marat M\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@infra_sos\" \/>\n<meta name=\"twitter:site\" content=\"@infra_sos\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Marat M\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/\"},\"author\":{\"name\":\"Marat M\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/91383d9702fb0e1cf1ad74c02a1a1e86\"},\"headline\":\"Active Directory Security Checklist: Ensure Your System is Fortified\",\"datePublished\":\"2024-03-22T09:55:00+00:00\",\"dateModified\":\"2024-03-18T17:42:43+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/\"},\"wordCount\":1804,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/infrasos.com\/#organization\"},\"keywords\":[\"active directory\",\"AD best practices\",\"security checklist\",\"security measures\"],\"articleSection\":[\"Active Directory\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/\",\"url\":\"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/\",\"name\":\"Active Directory Security Checklist: Ensure Your System is Fortified\",\"isPartOf\":{\"@id\":\"https:\/\/infrasos.com\/#website\"},\"datePublished\":\"2024-03-22T09:55:00+00:00\",\"dateModified\":\"2024-03-18T17:42:43+00:00\",\"description\":\"Active Directory Security Checklist: Ensure Your System is Fortified. Active Directory (AD) is a common target during cybersecurity attacks for several\",\"breadcrumb\":{\"@id\":\"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/infrasos.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Active Directory Security Checklist: Ensure Your System is Fortified\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/infrasos.com\/#website\",\"url\":\"https:\/\/infrasos.com\/\",\"name\":\"Active Directory Tools, Report, Monitor &amp; Manage AD\",\"description\":\"Active Directory &amp; Office 365 SaaS Reporting Tool\",\"publisher\":{\"@id\":\"https:\/\/infrasos.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/infrasos.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/infrasos.com\/#organization\",\"name\":\"InfraSOS - Active Directory & Office 365 Reporting Tools\",\"url\":\"https:\/\/infrasos.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png\",\"contentUrl\":\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png\",\"width\":113,\"height\":101,\"caption\":\"InfraSOS - Active Directory & Office 365 Reporting Tools\"},\"image\":{\"@id\":\"https:\/\/infrasos.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/infrasos\/\",\"https:\/\/twitter.com\/infra_sos\",\"https:\/\/www.linkedin.com\/showcase\/86283876\",\"https:\/\/www.youtube.com\/channel\/UCfGszuZdgxZYBg8DGIWxXCg\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/91383d9702fb0e1cf1ad74c02a1a1e86\",\"name\":\"Marat M\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4cae23af7c9550258e5289df67d06080?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4cae23af7c9550258e5289df67d06080?s=96&d=mm&r=g\",\"caption\":\"Marat M\"},\"description\":\"System administrator with 14 years of practical experience. Specializes in Microsoft products such as Exchange Server, Active Directory, Microsoft 365 and Azure.\",\"url\":\"https:\/\/infrasos.com\/author\/marat-4fgmail-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Active Directory Security Checklist: Ensure Your System is Fortified","description":"Active Directory Security Checklist: Ensure Your System is Fortified. Active Directory (AD) is a common target during cybersecurity attacks for several","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/","og_locale":"en_US","og_type":"article","og_title":"Active Directory Security Checklist: Ensure Your System is Fortified","og_description":"Active Directory Security Checklist: Ensure Your System is Fortified. Active Directory (AD) is a common target during cybersecurity attacks for several","og_url":"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/","og_site_name":"Active Directory Tools, Report, Monitor &amp; Manage AD","article_publisher":"https:\/\/www.facebook.com\/infrasos\/","article_published_time":"2024-03-22T09:55:00+00:00","article_modified_time":"2024-03-18T17:42:43+00:00","og_image":[{"url":"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/03\/0041-768x318.png"}],"author":"Marat M","twitter_card":"summary_large_image","twitter_creator":"@infra_sos","twitter_site":"@infra_sos","twitter_misc":{"Written by":"Marat M","Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/#article","isPartOf":{"@id":"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/"},"author":{"name":"Marat M","@id":"https:\/\/infrasos.com\/#\/schema\/person\/91383d9702fb0e1cf1ad74c02a1a1e86"},"headline":"Active Directory Security Checklist: Ensure Your System is Fortified","datePublished":"2024-03-22T09:55:00+00:00","dateModified":"2024-03-18T17:42:43+00:00","mainEntityOfPage":{"@id":"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/"},"wordCount":1804,"commentCount":0,"publisher":{"@id":"https:\/\/infrasos.com\/#organization"},"keywords":["active directory","AD best practices","security checklist","security measures"],"articleSection":["Active Directory"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/","url":"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/","name":"Active Directory Security Checklist: Ensure Your System is Fortified","isPartOf":{"@id":"https:\/\/infrasos.com\/#website"},"datePublished":"2024-03-22T09:55:00+00:00","dateModified":"2024-03-18T17:42:43+00:00","description":"Active Directory Security Checklist: Ensure Your System is Fortified. Active Directory (AD) is a common target during cybersecurity attacks for several","breadcrumb":{"@id":"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/infrasos.com\/active-directory-security-checklist-ensure-your-system-is-fortified\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/infrasos.com\/"},{"@type":"ListItem","position":2,"name":"Active Directory Security Checklist: Ensure Your System is Fortified"}]},{"@type":"WebSite","@id":"https:\/\/infrasos.com\/#website","url":"https:\/\/infrasos.com\/","name":"Active Directory Tools, Report, Monitor &amp; Manage AD","description":"Active Directory &amp; Office 365 SaaS Reporting Tool","publisher":{"@id":"https:\/\/infrasos.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/infrasos.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/infrasos.com\/#organization","name":"InfraSOS - Active Directory & Office 365 Reporting Tools","url":"https:\/\/infrasos.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/infrasos.com\/#\/schema\/logo\/image\/","url":"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png","contentUrl":"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png","width":113,"height":101,"caption":"InfraSOS - Active Directory & Office 365 Reporting Tools"},"image":{"@id":"https:\/\/infrasos.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/infrasos\/","https:\/\/twitter.com\/infra_sos","https:\/\/www.linkedin.com\/showcase\/86283876","https:\/\/www.youtube.com\/channel\/UCfGszuZdgxZYBg8DGIWxXCg"]},{"@type":"Person","@id":"https:\/\/infrasos.com\/#\/schema\/person\/91383d9702fb0e1cf1ad74c02a1a1e86","name":"Marat M","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/infrasos.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4cae23af7c9550258e5289df67d06080?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4cae23af7c9550258e5289df67d06080?s=96&d=mm&r=g","caption":"Marat M"},"description":"System administrator with 14 years of practical experience. Specializes in Microsoft products such as Exchange Server, Active Directory, Microsoft 365 and Azure.","url":"https:\/\/infrasos.com\/author\/marat-4fgmail-com\/"}]}},"_links":{"self":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/57378"}],"collection":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/comments?post=57378"}],"version-history":[{"count":35,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/57378\/revisions"}],"predecessor-version":[{"id":57657,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/57378\/revisions\/57657"}],"wp:attachment":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/media?parent=57378"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/categories?post=57378"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/tags?post=57378"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}