Before you define any security measures you need to determine against which threats you need to protect
your network.
You need to define your organization's security boundaries and you must identify from where hackers
or attackers might try to compromise your security.
For example you will need to secure your network against attacks from outside your company.
You also might have regions departments or groups where you can not trust your organization's employees
in the same way as you trust employees in a strictly controlled environment such as your main office.
Do you have administrative groups that you can not trust.
Do you have locations or departments that require a higher level of security.
All of these factors will have an impact on your security planning to secure your Active Directory Domain
and domain controllers.
You need to address security in terms of the following risks such as network security authentication
attacks elevation of privileges denial of service attack operating system service or app attacks operational
risks and physical security threats.
Now let's take a closer look at each of these risks.
First is network security.
An attacker must gain access to your network to get further information.
Therefore you should ensure that network boundaries such as firewalls aren't exposed services are highly
protected.
Also you should ensure that your wireless networks are secured properly and do not allow untrusted devices
to connect to your internal network.
Use certificates for wireless connections and implement Network Access Protection or NAB to secure network
access.
The next risk is authentication attacks.
Access to authentication credentials such as usernames and passwords is the primary target for anyone
who tries to access your network and data Active Directory Domain Controllers store all information
about all users and their passwords and they need sufficient security to protect this information.
The next threat is elevation of privilege while regular user credentials can access certain information
domain administrators or other administrative groups have elevated privileges given those accounts control
over data.
In many cases admin and administrators can grant themselves additional access to resources.
Additionally they can configure security measures if attackers cannot await the credentials they used
by booting their accounts into elevated groups in the same or trusted domains.
They can lower security and potentially bypass auditing of security safeguards.
The next risk is denial of service attack a malicious user or users do not launch DOS attacks to access
data but rather to disable services systems or whole infrastructures.
Certain security measures such as account lock out policies might be useful in protecting your network
against some threats but they also provide an easily accessible.
Does attack surface.
Next up is operating systems service and app attacks network operating systems.
In addition to services and apps that support communication over networks are while honorable to security
techs.
These systems provide communication over a network and attackers will try to drag the expected communications
to MAG.
These services do Sampson differently than what was intended.
Another risk is a biracial risk.
It is important to maintain an organization's infrastructure properly.
Any kind of software that operates over networks could be a potential target for attackers to tighten
security software around hardware Rwanda's release updates regularly to ensure that they do not leave
a network vulnerable.
The next threat is physical security threat.
It is important for Active Directory Domain Controllers to be physic secure if someone gets physical
access to a server it is easier to disable security safeguards sound around malicious software locally
to retrieve all passwords in a domain.