Having a secure authentication process is one of the most important security components of your domain
environment, and you should consider the following factors when implementing secure authentication.
You have to consider securing user accounts and passwords secure in groups with elevated permissions,
ordered in critical object changes, deploy and secure authentication and secure network activity,
establishing the provisioning and cleanup processes.
Now, let's talk about each of these aspects in more detail.
Secure user accounts and passwords.
It is very important to secure user accounts and passwords.
And you do this by configuring and utilizing technical components such as configuring passwords and
account policies, and also by educating your users about how to create and use complex and landslip
passwords.
If your support Lancy passwords teacher users how to use pass phrases to replace passwords.
The next aspect is to secure groups with elevated permissions.
Every organization has groups with elevated permissions.
These groups include the domain admins, schema admins and Enterprise Edmands groups.
Implementing secure management processes for these groups is important.
For example, you might limit who knows the passwords for members of these groups and ensure that all
administrators have special administrative accounts and that they are signing only with those accounts
when performing administrative tasks for these groups.
You can also use the restricted group settings and group policy.
The next aspect is to deploy secure authentication.
To factor authentication is the key to achieve heightened security beyond regular username and password
credentials.
It is common to use smart cards to secure authentication or implement multifactor authentication with
mobile phones.
Smart cards have a stored certificate that acts as a user credentials to sign in rather than a username
and password to authenticate.
By using a smart card, you must possess the card and you must have the personal ID number or peon or
password to unlock the private key.
The combination of the public key known to the domain controller and the private key on the smart card
enables the domain controller to authenticate the user.
You also can enforce the use of smart cards if users want to access additional apps.
And across our roads if you use smart phones.
The second factor for authentication, you can require users to use the application, text message or
phone to prove their identity.
Next one is to secure network activity.
Secure in your network is necessary when trying to achieve a secure client server infrastructure.
If your organization supports wireless networks, ensure that all networks with access to your organization's
servers are secure, preferably by using certificates if required, provide public or guest networks
to allow customers, partners or other non employees to have Internet access rather than allowing them
access.
The corporate network for your wired networks.
Consider device health at the station to prevent unknown devices from connecting to your network for
critical servers that host highly confidential information.
Consider enforcing Internet protocol security or IP sex signatures or encryption to secure network communication.
The next aspect is to establish the provisioning and cleanup processes, basically provisioning in.
As a new employee, by creating their account, group memberships, mailbox and other components that
they need to work in your organization, although provisioning is important, you should remember that
often forgotten the provision and is even more important, you must define and establish processes for
employees who resigned.
Also, consider other reasons an employee might take leave, such as parental leave, define what type
of access, if any, is necessary.
Additionally, you should decide whether to deactivate accounts, delete accounts or remove accounts
from certain groups such as general distribution lists or critical human resources apps, and decide
whether to allow or prevent access by users who are outside your organization's network.
Clean cleanup process also as necessary for domain members such as for client computers, because they
also are allowed to authenticate against the domain and a malicious user may utilize their credentials
to compromise their network.
Furthermore, ensure that there are no client computers or users that were created, but which have
not been used to connect to the domain leaders because their passwords are default.
Well known passwords which are malicious user might discover and to utilize and last but not least respectless
to secure client computers.
If you want to secure your A.D.s and active director domain controllers, you must secure your client
computers, client computers, cash that last turn lagoon's by default.
Therefore, if a computer if a client computer is lost, you need to have a process by which you track
accounts that silentium within the password change interval and you need to know how to reset passwords
after a loss is reported.
You also need to protect your internal network from client computers that connect from wired or wireless
networks from homes, hotels and airports to protect client computers.
Ensure that Glan computers have all security updates installed, that they have car antivirus protection
and a host based firewall, and consider using driver encryption such as a bit longer drive encryption.