In the quest to gain access and control over your network, the bad guys always take the path of least resistance – Active Directory groups. Read on and learn why are groups so attacker-friendly. The CrowdStrike 2019 Global Threat Report discusses how long it takes for attackers that have compromised a single endpoint to move…
When “Shadow IT” no longer lives in the shadows, it’s time to embrace the technical value! Users can bring this value by utilizing the IT-sanctioned self-service tools. The advent of the cloud has invigorated the notion that users can do a lot of things themselves without the help of IT. Originally referred to as “Shadow…
There has been a lot of talk over the past few years on Just In Time provisioning. That is, using an SSO (Single Sign On) platform to create nearly real-time accounts in web-based applications the first time they are used. This increases productivity and reduces the amount of work required for IT workers to create…
The latest trend in security – Zero Trust Security – demands a “never trust, always verify” approach. At the heart of this approach is the requirement that the configuration of identity and associated assigned security is 100% correct. Without this in place, Zero Trust is protecting an insecure environment. If you’re new to Zero Trust,…
The delegation of directory administration to those outside of IT is a concept whose time has come. But it can’t be done hap-hazardly; IT needs to define what is being delegated and to whom. We’re at a point in the evolution of our industry that two truths have come to fruition: IT no longer has…
Azure AD Gets on the Group Expiration Bandwagon I recently wrote about the need for group expiration as part of a comprehensive lifecycle approach to group management. It’s a necessary step, given the life of group objects in any of the directories you manage won’t last forever. The only exceptions, generally, lie around built-in administrative-type…