The AD CS Backdoor
Reading Time: 5 minutesAD CS attacks like ESC1 through ESC8 turn a certificate server into full domain takeover. Here’s what each misconfiguration is and how to audit for it.
Does Intune Monitor Your Activity?
Reading Time: 5 minutesDoes Intune monitor your activity? Here’s what Intune actually sees, what it never sees regardless of settings, and how that changes once Microsoft Purview or Defender is added.
Intune: Which License One Do You Actually Need?
Reading Time: 5 minutesConfused about which Intune license you need? Here’s what Plan 1, Plan 2, Suite, Education, Government, and device-only licenses actually cover, and when to use each.
Build a Tiered AD Model
Reading Time: 6 minutesHow to build a tiered AD model with Tier 0 for AD, Tier 1 for servers, and Tier 2 for workstations, including the sg- security groups, per-role account counts, and the deny-logon GPOs that enforce it.
