Chapter 26. Domain Controller Threats

If domain controller security could be described in a single sentence, a good one would be "Defending the keys to the kingdom." This statement really captures what domain controller security is all about. Active Directory, which is protected by the domain controller, manages network resources and user accounts and acts as the central authority for network security. If the domain controller gets compromised, the objects in Active Directory can easily be compromised too, and at that point you’re pretty much sunk.

The critical role that the domain controller plays within a network makes it a prime and likely target for attackers. They will try to do nefarious things against the domain controller such as launch ...

Get Assessing Network Security now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.