The physical security of domain controllers is critically important domain controllers contain all the
credentials in your organization's Active Directory Domain.
If attackers achieve physical access to your domain controllers they can bypass almost any safeguards
that you have.
They then can access most passwords quickly and they can use this information to attack your network.
Therefore you should do the following steps to further secure your Active Directory Domain Controllers.
Those steps include that you only deployed domain controllers where you can ensure physical security
if your server locations do not have dedicated rooms with access control Do not put a domain controller
in that environment.
Use the road disease where possible you can use raw disease as domain controllers in locations with
less security with less physical security because by default rather see as do not store secrets such
as account passwords use bit locker drive encryption to provide an extra level of security consider
and grouped and domain controller a hard drives by using bit locker.
This prevents attackers from accessing the data on server hard drives.
If they are removed from the servers Windows Server 2016 and later supports use in bit locker on Walliams
that's traded as databases.
However it does not support the use of IFRS to protect aided is database files.
Another step is to monitor hot swap disk systems usually servers deploy with a hot swap disk system
which enables you to change a drive without server interruption.
When a hardware failure cures if you have redundant array of independent disks or raid Level One mirroring
in your servers you should ensure that you have monitoring and place so you are aware if any disk is
removed or exchanged.
Otherwise it is simple to remove and possibly replace a hard drive from your domain controller.
If someone possesses your domain controller racecar driver he or she has the same ability to exploit
the system as they would if they had the whole demand controller.
The next step is to protect Virtual Disks.
Many organizations deploy domain controller says virtual machines.
The Virtual Disks used by virtual machines must be as secure as physical disks and the administrators
of your virtual infrastructure must be as trusted as your domain admins sometimes to run in a dedicated
virtual infrastructure for critical components such as domain controllers addresses these risks.
Another step is to store backups in secure locations your domain controller backup contain all the same
information as domain controllers make sure that backups are stored and secure all occasions which only
trusted administrators can access.
Next up we'll be talking about raw disease.
I'll see you there.