Category: Active Directory

Turn on That Scary DC (aka handling an Orphan Domain Controller)

Jan 18, 2017 - Active Directory - 0 Comments - Standard

I just wanted to share this post from the “Ask Premier Field Engineering” blog: In the past I had clients with similar issues, but I’d removed the DC and done metadata cleanup as if it were a long lost irretrievable DC.  What if there was a need to get data off of the orphan domain controller? […]

Local Administrator Password Solution (LAPS)

Feb 24, 2016 - Active Directory - 0 Comments - Standard

I had done a project to implement a local admin account password management system a few years ago, and just today stumbled across “Local Administrator Password Solution” aka LAPS – a free, officially supported Microsoft solution for managing local admin passwords within Active Directory.  You can download it from Microsoft here.  And here is a […]

Local Administrator Password Management Solution

Jul 16, 2014 - Active Directory - 0 Comments - Standard

I had a client that was dinged on a penetration test by having one communal password for the local administrator account on all machines.  This is convenient for help desk, but is obviously very insecure.  In the case of this client, the local admin password was commonly known, so they ran some sort of linuxsuperhacker […]