gMSA: Kill Your Service Account Passwords
Reading Time: 4 minutesGroup Managed Service Accounts (gMSA) kill service account passwords for good. AD rotates a 240-byte password every 30 days so kerberoasting cant crack it.
The AD CS Backdoor
Reading Time: 5 minutesAD CS attacks like ESC1 through ESC8 turn a certificate server into full domain takeover. Here’s what each misconfiguration is and how to audit for it.
Intune Zero Touch Deployment
Reading Time: 4 minutesHow Intune zero touch deployment actually works, how Dell registers the hardware hash before shipping, and how to authorize drop shipping straight to a new hire.
Microsoft Entra Connect: A Simple Setup and Hardening Guide
Reading Time: 5 minutesA step-by-step setup guide for Microsoft Entra Connect, covering server hardening, directory user permissions, and writeback configuration.
