Category Archives: Information Security

Active Directory Tiering

Which account belongs in which Tier? A practical guide to Tier 0, Tier 1 and Tier 2? Active Directory tiering is one of the most important concepts for protecting a Windows domain against credential theft and lateral movement. The basic … Continue reading

Posted in Information Security | Leave a comment

Active Directory Security: How to Detect and Fix AllowReversiblePasswordEncryption Risks

One often-overlooked security risk in Active Directory (AD) is the setting AllowReversiblePasswordEncryption. When enabled on a user account, AD stores the password not only as a hash but also in a form that can be reversed back into plain text. … Continue reading

Posted in Information Security | Tagged , , , | Leave a comment