Active Directory Hardening

16-1 Install Active Directory Domain Service on Windows Server 2022 Core Edition

16-2 Install Windows Server 2022 as Member Server + CA Server

16-3 Install Windows Server 2022 as Stand-Alone Server and Related Configuration

16-4 Install Windows 11 as PAW and Related Configuration

18-1 How Authentication work in Active Directory (Kerberos)

18-2 Delegation and Protocol Transition

18-3 NTLM Overview and how Secure it

18-4 What is Service Principal Name?

18-5 Manage Service Account and Group Manage Service Account

18-6 Access Control in Active Directory

18-7 Active Directory Security, Permission and ACL Analysis

18-8 Enabling SSL \ TLS on LDAP Protocol

17-1 Active Directory administrative tier model

17-2 Microsoft Privileged Access Workstation

17-3 Separate Admin Account for Admin Tasks

17-4 Protected Users Accounts and Groups in Active Directory

17-5 Protected AdminSDHolder Object

17-6 Protected Users Group + Kerberos over IP

17-7 Windows Defender Remote Credential Guard

19-1 Windows Server 2022 – Domain Controller Security Baselines

19-2 Windows Server 2022 – Member Server Security Baselines

19-3 Users Account Security Baselines

19-4 Windows 10/11 – Computer Security Baselines

19-5 Windows 10/11/2022 – Credential Guard Security Baselines

19-6 Windows 10/11/2022 – Defender Antivirus Security Baselines

19-7 Windows 10/11/2022 Update Baseline Security Baselines

19-8 Microsoft Office 2007/2010/2013/2016/2019/2020 Security Baselines

19-9 Local Group Policy Object Utility (LGPO.exe v3.0) Security Baselines

20-1 Config WFAS and Connection Security Rules by Group Policy

20-2 Configure WFAS on Domain Controllers

20-3 Configure WFAS on Member Servers and Clients

20-4 Configure SMB signing and disable SMB 1.0

20-5 Basic Domain Isolation Policy

21-1 Control execution of scripts using execution policy, code signing

21-2 PowerShell Constrained Language Mode

21-3 Secure PowerShell remoting with IPSec und TLS

21-4 Delegate administrative tasks with Just Enough Administration (JEA)

21-5 User Applocker for control Windows PowerShell

21-6 Audit and analyze PowerShell activities

22-1 Enable and Configure UEFI on Domain Controllers

22-2 Enable and Configure Secure Boot (Trusted Boot)

22-3 Trusted Platform Module (TPM)

22-4 BitLocker Operating System Drives

22-5 Enable Virtualization Based Protection of Code Integrity

22-6 Enable Secure Launch

22-7 Implement Whitelisting with Microsoft AppLocker

23-1 Disable RC4, DES Kerberos Encryption Protocol in Active Directory Domain

23-2 Enable AES 128, AES 256 Kerberos Encryption Protocol in Active Directory Domain

23-3 How Reset Krbtgt User (Golden Ticket Attack Explain)

23-4 Risks of Pre-Windows 2000 Compatible Access Settings

23-5 What is Confidentiality flag and how use it

23-6 What is Relax Password and how use it

23-7 Securing Local Administrator Accounts with LAPS (Secure Attribute by Confidential Flags)

23-8 Scan misconfiguration of Active Directory by Bloodhound