I cannot offer you “hands on the keyboard” to perform security-improving changes in your environment, my employment contract does not allow for that. If you need this kind of help and your local partner cannot provide it, please talk to Semperis, and either the Professional Services team or one of Semperis partners near you can help.
However, if you are unsure whether your AD security posture is up to the task of protecting your digital crown jewels, I can help you by
- reviewing your Red Forest implementation (no, Red Forest is not dead!)
- reviewing your administrative tiering (no, it’s not the same as Red Forest – these two components used to make up Microsoft’s ESAE architecture, and neither of them lost any of its actuality)
- reviewing your delegation model (cheers from BadSuccessor and a hundred other instant elevation scenarios)
- reviewing your Microsoft PKI implementation
- reviewing your auditing and reactive security processes
If you are interested in these services, please get in touch!