lundi 29 avril 2013

[Active Directory] Best Practices for Securing Active Directory White Paper

Microsoft has published a new white paper named Best Practices for Securing Active Directory.

This document contains recommendations to assist organizations in enhancing the security of their Active Directory installations. By implementing these recommendations, organizations will be able to identify and prioritize security activities, protect key segments of their organization’s computing infrastructure, and create controls that significantly decrease the likelihood of successful attacks against critical components of the IT environment. This document discusses the most common attacks against Active Directory and countermeasures to reduce the attack surface, and recommendations for recovery in the event of complete compromise.

The white paper is available here : Best Practices for Securing Active Directory

lundi 22 avril 2013

Who Wants to Be an AD Expert ? Blogroll and other Stuff

Hi,

Before starting this blog series I would share some links to blog related to Active Directory and other links like Technet, MSDN, Wiki, Forum,  ...

This list isn't exhaustive and will evolve over time.

Microsoft Blog :
Ask The Directory Services Team : http://blogs.technet.com/b/askds/
Active Directory Documentation Team : http://blogs.technet.com/b/activedirectoryua/
AD Troubleshooting : http://blogs.technet.com/b/instan/
AD RMS Team Blog : http://blogs.technet.com/b/rms/
Windows PKI blog : http://blogs.technet.com/b/pki/
Group Policy Blog : http://blogs.technet.com/b/grouppolicy/
Windows Azure Active Directory Graph Team : http://blogs.msdn.com/b/aadgraphteam/
Group Policy Central : http://www.grouppolicy.biz/
Ask Premier Field Engineering (PFE) Platforms : http://blogs.technet.com/b/askpfeplat/
Goatee PFE : http://blogs.technet.com/b/ashleymcglone/
Canberra Premier Field Engineering Team Blog : http://blogs.msdn.com/b/canberrapfe/
Premier Field Engineering : http://blogs.technet.com/b/mspfe/
Bruce Adamczak : http://blogs.technet.com/b/bruce_adamczak
Rob Bolbotowski : http://blogs.technet.com/b/robertbo/
Glenn LeCheminant : http://blogs.technet.com/b/glennl/
Jane Lewis : http://blogs.technet.com/janelewis
Mark Empson : http://blogs.technet.com/b/mempson/
Mark Morowczynski : http://blogs.technet.com/b/markmoro/
Matheesha Weerasinghe : http://blogs.technet.com/b/maweeras/
Ben Pearce : http://blogs.technet.com/b/benp/

Other Blogs :
Brian Desmond's Blog : http://briandesmond.com/blog/
The Swede's blog : http://jimmytheswede.blogspot.fr/
Joe Richard’s blog : http://blog.joeware.net/
Sander Berkouwer's Blog : http://blogs.dirteam.com/blogs/sanderberkouwer/default.aspx
Ulf B. Simon-Weidner's Blog : http://msmvps.com/blogs/ulfbsimonweidner/default.aspx
Mike Kline's Blog : http://adisfun.blogspot.fr/
Paul Bergson's Blog : http://blogs.dirteam.com/blogs/paulbergson/default.aspx
DSA Blog : http://dsablog.com/
Jorge's Quest For Knowledge : http://jorgequestforknowledge.wordpress.com/
Christoffer Andersson' Blog : http://blogs.chrisse.se/
ADdict : http://setspn.blogspot.co.uk/
Florian’s Blog : http://www.frickelsoft.net/blog/
Tomek's DS World : http://blogs.dirteam.com/blogs/tomek/default.aspx
Sean Metcalf's Blog : http://blogs.metcorpconsulting.com/tech/
Mark Parris's Blog : http://markparris.co.uk/
Santhosh Sivarajan's Blog : http://portal.sivarajan.com/
Open a Socket! : http://www.open-a-socket.com/
Activedir.org : http://www.activedir.org/List.aspx
Shariq Sheikh's Blog : http://www.shariqsheikh.com/blog/
John Policelli's Blog : http://policelli.com/blog/
Clint Boessen's Blog : http://clintboessen.blogspot.fr/
Meinolf Weber's Blog : http://msmvps.com/blogs/mweber/
Sandesh Dubey's Blog : http://sandeshdubey.wordpress.com/
Awinish's Technical Blog : http://awinish.wordpress.com/
Abhijit's Blog : http://abhijitw.wordpress.com/

Wiki :
Active Directory Wiki : http://social.technet.microsoft.com/wiki/tags/Active+Directory/default.aspx



Technet and MSDN :
Active Directory Services : http://technet.microsoft.com/en-us/library/dd578336%28v=ws.10%29.aspx
Active Directory Domain Services : http://msdn.microsoft.com/en-us/library/aa362244%28v=vs.85%29.aspx

Technet Forum :
Directory Services : http://social.technet.microsoft.com/Forums/en-us/winserverDS/threads
Group Policy : http://social.technet.microsoft.com/Forums/en-us/winserverGP/threads
Migration : http://social.technet.microsoft.com/Forums/en-us/winserverMigration/threads

Channel 9 :
Active Directory Channel 9 : http://channel9.msdn.com/search?term=Active+Directory



Who Wants to Be an AD Expert ? The Begining ...

Hi All,

It's been a while I haven't posted blog articles.

The main reason was I changed job two month ago. My wish was to stop working on Exchange and to focus on Active Directory and to start studying Identity and Access Management.
Indeed, even if I've been working on Active Directory for more than 4 years now, I started studying Active Directory in depth one year ago.


Active Directory is like an iceberg, if you want to be an expert, you'll have to put your head under water, start diving and exploring deeply.



So, I started digging Technet, Blogs and forum for Active Directory technical and conceptual contents.

From where to start, where to go after,  were my first questions.
After some research I found the following two links and I decided to use them like a program to follow:

It's been a while I was thinking of starting a new blog series on my "Journey" to become an AD expert.
The main purpose of this blog series will be to share documentations, blog posts, forum threads and links I found relevant on Active Directory subjects.

And here we are, today I decided to start that blog series and name it Who Wants to Be an AD Expert ?

I know before starting that's the kind of blog series that will never end because Active Directory will continue to evolve but I'll try to post  at least 2 times a month.


To follow updates of this blog series : #WW2BANADEXPERT