Most recents (1)

Matthieu Garin

@matthieugarin

1/3
📚 Excellent article on #ADSecurity, and more particularly Security Bastions (#PAM) in the context of #ActiveDirectory tiering👍 It is not easy to make it simple on this topic, and it's the case here! lnkd.in/eJ3Kz7Bq

2/3
1️⃣ In theory, there should be an instance of a bastion in each Tier
2️⃣ In reality, very few companies have a bastion on #Tier2 💻
3️⃣ First choice is to deploy a bastion on #Tier1 (large number of machines and accounts 👥️️)

3/3
4️⃣ #Tier0 can be more simply managed by #VPN + #PAWs (dedicated and hardened admin workstations)
5️⃣ Most importantly is to ensure the #PAM does not interfere with the principles of tiering... you can easily break the silos when you start playing with the functionalities 🌐

Read 3 tweets

Discover and read the best of Twitter Threads about #adsecurity

Most recents (1)

Related hashtags

Discover and read the best of Twitter Threads about #adsecurity

Most recents (1)

Related hashtags

Did Thread Reader help you today?