Delegating permissions in Active Directory
Least privilege wins! Delegate permission in every case, never use built-in operator groups.
Posts by Category
Active Directory
Abusing owner rights in Active Directory
In Active Directory, the object owner refers to the user or group that has ownership of an object. This permission can be abused!
Windows
How to delegate domain join permissions - Using least privilege and best practice
De-privileging the account(s) used for joining computers to the domain.
Who has access to your servers
Member server inventory - local groups
Hunting
How to track changes in Active Directory
In this blog post, we’ll discuss how to track changes in Active Directory (AD) with multiple examples. This information can be crucial for identifying securi...
Administration
Using PowerShell to Get Members of Privileged Groups Across All Domains
In this blog post, we will explore a PowerShell script designed to retrieve members of specific privileged and exclusive groups across all domains in an Acti...