Welcome to MSDN Blogs Sign in | Join | Help

Browse by Tags

All Tags » Security » Windows   (RSS)

Auditing DNS Record Entries (or deletions)

I got an unusual request from a customer today. She is in an environment where everyone is currently a domain admin (not a good thing). Although they are taking my advice and moving to a least priviliged scenario, things are sometimes slow in federations.
Posted by anthonw | 0 Comments
Filed under: ,

How does Authentication Work Cross Domain?

A question that comes up frequently involving federated customers is how does an organization need to configure its firewalls to allow users in a trusted, but not fully trusted, domain to access their resources. Consider the following scenario: [WEB RESOURCE]---|---FIREWALL---WAN---FIREWALL---|---[USER
Posted by anthonw | 3 Comments
Filed under: ,

Active Directory LDAP Queries

Active Directory Users and Computers (2003 version) provides a feature called Saved Queries that takes advantage of LDAP queries to find objects in Active Directory that might meet a specific condition. When I am working with customers, I am often surprised
Posted by anthonw | 1 Comments
Filed under: , ,

Political Forest and Domain Design

In my work with a large number of federated customers, the unavoidable component of Active Directory design is the age-old question of "How many forests do I need?" This is simple to define, but challenging to discuss in the board room. There are three
Posted by anthonw | 2 Comments
Filed under: , ,

The Federation Firewall Boundary

As a specialist by trade in both technology and financial audit, internal control structures and security play an important role in the work that I do. I came across Steve Riley's Death of the DMZ over broadband the other day and his thesis really hit
Posted by anthonw | 2 Comments
Filed under: ,
 
Page view tracker