Beyond the MCSE: Active Directory for the Security Professional Sean Metcalf (@Pyrotek3) s e a n [@] TrimarcSecurity.com www.ADSecurity.org TrimarcSecurity.com ABOUT Founder Trimarc, a security company. Microsoft Certified Master (MCM) Directory Services Microsoft MVP Speaker: Black Hat, BSides, DEF CON, DerbyCon, Shakacon Security Consultant / Security Researcher Own & Operate ADSecurity.org (Microsoft platform security info) Sean Metcalf [@Pyrotek3 | [email protected]] AGENDA Key AD details security professionals should know. Most common AD Security issues Active Directory security enhancements by OS Windows 10/2016 Security Features Security Pro’s Checklist Sean Metcalf [@Pyrotek3 | [email protected]] Differing Views of Active Directory • Administrator • Security Professional • Attacker Complete picture is not well understood by any single one of them Sean Metcalf [@Pyrotek3 | [email protected]] AD Administrator/Engineer Sean Metcalf [@Pyrotek3 | [email protected]] Security Pro Sean Metcalf [@Pyrotek3 | [email protected]] Attacker Sean Metcalf [@Pyrotek3 | [email protected]] YOUR SECURITY ACCESS CONTROLS… Active Directory Security GRATEFULLY ACCEPTED Sean Metcalf [@Pyrotek3 | [email protected]] Sean Metcalf [@Pyrotek3 | [email protected]] Sean Metcalf [@Pyrotek3 | [email protected]]