Tag: delegation

2014 Security Year in Review

Whew! Thank goodness 2014 is over! Well, at least if you are considering the year’s security issues, attacks, leaks, and password ​ issues . As a security and Windows Active Directory professional, ​ I feel like I have earned the right and it is the appropriate time to say, “I told you so.” ​ Let me put this into perspective, to prove my point. 2014 financial services firms – $20.8 million lost to breaches 2014 tech companies – $14.5 million lost to breaches 2014 communication providers – $12.7 million lost to breaches Ebay – 150 million user accounts compromised due to phishing attacks, users asked to change password immediately Home Depot – 56 million credit cards compromised US Post Office – 800,000 employees’ confidential data breached Unfortunately, there are many ​ , many more that could be listed

Safely Delegating Password Reset Capability in Active Directory

I have been preaching for years about how powerful Active Directory is in the ability to delegate control over certain tasks and certain objects in Active Directory. One of the most obvious delegations is giving a one group of users the ability to reset passwords for a different group of users. There are a few issues using the Microsoft solution, and those issues can cause insecure settings, hard-to-report delegations, and access to AD that is hard to find and remove