Delegating Domain Join Permissions with Least Privilege
Stop using Domain Admins to join machines. Delegate the exact permissions needed — nothing more.
Posts by Category
Security
Fixing Rogue Object Ownership in Active Directory
Object ownership in AD grants implicit WriteDacl — a direct path to privilege escalation. Here’s how to detect and fix it.
Active Directory
Delegating Permissions in Active Directory
Stop using built-in operator groups. Delegate permissions properly with least privilege.
Windows
Who Has Access to Your Servers
Audit local group memberships across your server fleet — because you need to know who has admin and RDP access.
Hunting
Tracking Changes in Active Directory with KQL
Who changed what, and when? KQL queries for the most common AD change events.
Administration
Auditing Privileged Group Members Across All Domains
A PowerShell script that pulls members of all privileged groups across every domain in your forest.