The AD CS Backdoor
Reading Time: 5 minutesAD CS attacks like ESC1 through ESC8 turn a certificate server into full domain takeover. Here’s what each misconfiguration is and how to audit for it.
Intune: How to Enroll Android Devices
Reading Time: 5 minutesHow to enroll Android devices in Intune, covering work profile BYOD, fully managed, corporate owned work profile, dedicated kiosk devices, and device enrollment managers.
How Intune Autopilot Works
Reading Time: 5 minutesHow Windows Autopilot actually works, how the hardware hash and deployment profile fit together, and how the Enrollment Status Page installs your company app and sets up the user account during OOBE.
Authentication Policy Silos
Reading Time: 4 minutesAuthentication Policy Silos and the Protected Users group contain admin credentials so a stolen Tier 0 login cant be cached or replayed. Here’s how to set up both.
