Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Are any applications (off the shelf, or internal) leveraging Active Directory's Confidential Attributes?

Would you store sensitive information here such as a private key, or a salt here?

I'm planning a demonstration of this feature, but would like to cite as many real world usages, or implementations as possible.

share|improve this question
    
I'm curious as well... most people don't even know about this attribute. Do you have a particular application for this, or are you just wanting to give a cool demo? –  SteveS Oct 17 '11 at 21:20
    
@SteveS The linked question references an application I'm independently building for sale. People want to know where the seed is stored/calculated so I want to show that other applications use this as well and also that I'm not being "creative" with security –  makerofthings7 Oct 17 '11 at 21:25
add comment

1 Answer

I see that Stanford is using it as part of their bitlocker system recovery process Stanford link

For computers that are part of the Stanford Windows Infrastructure, a copy of the recovery password is stored with the computer object as a confidential attribute. By default, only Domain Administrators can see confidential attributes, no matter what access is granted by standard ACLs.

Looks like a great feature to leverage for Role Based Access Control but I don't have any examples at hand.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.