In corporate environments, Active Directory (AD) deployment is the de facto standard for administering Windows-based IT infrastructure.
In this article, the author describes steps to improve AD security using a comprehensive approach, encompassing more than just domain configuration changes.
We'll explore some effective Active Directory security measures—from enabling SMB signing to segmentation and privilege minimization—and discuss a set of basic practices for securing AD.