Tag Info

New answers tagged

1

You can refer to this document http://dl3.checkpoint.com/paid/a6/CP_R75_IdentityAwareness_AdminGuide.pdf?HashKey=1406609615_673007d65df939c943ee67df223fe99e&xtn=.pdf. It is checkpoint's feature to do what you want. The basic idea is simple. Monitor DC's windows event log for user's logon message. There are specifc event types for user logon event. ...


1

In an Active Directory setup, the "certificate templates" are supposed to be used by the clients and by the CA itself ("AD Certificate Services"). For the CA, the templates describe how certificates shall be issued, including: The certificate contents, including all the extensions, validity period and so on. The issuing conditions, e.g. whether the ...


0

RODCs really are all about physcial security, and not at all about network security. They're an upgrade of ye olde Backup Domain Controllers, that had a nasty tendency to get stolen (and the database along with it). RODCs come with a unique kbtgt account, so they can't intrude on Active Directory, or decipher kerberos tickets on behalf of WDCs, in case of a ...


1

I believe that there are security benefits to deploying an RODC in a DMZ, namely because you can control what AD information is replicated. You can therefore selectively choose what information must be replicated (account attributes / passwords / etc) all while avoiding exposing a writable DC. Microsoft released an article about putting domain controllers ...



Top 50 recent answers are included