
gMSA: Kill Your Service Account Passwords
Reading Time: 4 minutesGroup Managed Service Accounts (gMSA) kill service account passwords for good. AD rotates a 240-byte password every 30 days so kerberoasting cant crack it.
Let’s Match it up
Reading Time: 14 minutes Growing up, I watched my parents do this thing that feels kind of rare now. They didn’t just go to work. They built a work life. Like the kind that bleeds into the community, where people know your name, and your effort leaves marks in places…
Entra ID source anchor attribute
Reading Time: 5 minutes So, here I am looking down at a project to create a new domain and migrate users. Normally this isn’t a bad process. You clone the user on the other domain and have them sign in. Use a tool like Profwiz or ADMT (assuming it works). Then I…
Intune Detection Rules
Reading Time: 5 minutes The other day, I was showing a friend how to set up Intune deployments. Then it hit me: I have unique scripts for script detections and things like that here on therandomadmin.com. However, I haven’t really gone through the detection rules for…
