Securing domain controllers
Anyone in the world of security knows that a knowledge base was published by Microsoft well over 20 years ago discussing the 10 immutable laws of security, covering years of experience to help guide organizations in establishing solid security principles (this is still available at https://docs.microsoft.com/previous-versions//cc722488(v=technet.10)?redirectedfrom=MSDN). Though there was a version 2.0 published at one point, the original set of laws and specifically lucky #7 stuck with me all these years: The most secure network is a well-administered one. This couldn’t be truer even to this current day – a solid set of documentation, policies, and procedures ensure proper governance and compliance with responsibilities and operating procedures. Failure to adhere to this set of governing policies could lead to vulnerabilities, misconfigurations, outdated applications, and missing patches that can be mitigated and even more easily exploited...