How to extract hashes from IFM backup
How to extract Active Directory password hashes from an IFM backup using ntdsutil and DSInternals PowerShell module for security auditing purposes. Continue reading How to extract hashes from IFM backup
Security
Securing Active Directory Administrators Groups
A step-by-step process for reducing Active Directory Administrators group membership by creating device-type-specific delegation groups using WMI filters and Group Policy. Continue reading Securing Active Directory Administrators Groups
Active Directory – Simple Tier Isolation
Implement a simple three-tier isolation model in Active Directory using WMI filters, security groups, and Group Policies to restrict logon access by tier. Continue reading Active Directory – Simple Tier Isolation
Delegation the proper way
A structured Active Directory delegation model using Delegation Groups and Role Groups to simplify permission management, improve visibility, and enable reuse across teams. Continue reading Delegation the proper way
Active Directory Locked Account Investigation Process
A comprehensive process for investigating Active Directory account lockouts, covering auditing configuration, source device identification using EventComb, Lockout Status, and ADAudit, plus preventive measures. Continue reading Active Directory Locked Account Investigation Process
Test Passwords Against Active Directory User
A C# tool to test passwords against Active Directory users using PrincipalContext validation, supporting multiple semicolon-separated passwords in a single command. Continue reading Test Passwords Against Active Directory User
SetRMPassword – Reset the Recovery Mode password on a Microsoft Active Directory Domain Controller
An AutoIt-compiled script that automates ntdsutil.exe to reset the Directory Services Restore Mode password on Active Directory Domain Controllers via a single command. Continue reading SetRMPassword – Reset the Recovery Mode password on a Microsoft Active Directory Domain Controller