Ars Technica

Disable replication on a 2003 domain controller

Greetings. Anyone know how to disable replication (that is, replication of AD data from one domain controller to another) under Windows Server 2003? Under Windows 2000 there was a tool included in the ...
Security Boulevard

Detecting DCSync attacks using directory replication event logs

DCSync is one of the more important identity abuse techniques to understand if you run Active Directory. It does not rely on malware on the domain controller itself, and it can be carried out using ...
Ars Technica

Setting up a Domain Controller (and eventually Exchange Replication) at a remote site

I’m going to be setting up a small server in a remote location that will be a Domain Controller for our network, and eventually a replica of our Exchange server. There are only going to be a few users ...
Computerworld

Active Directory mistake: Moving domain controller objects into a child OU of the domain controller is unsupported

In two previous articles (here and here) I shared some classic Active Directory mistakes people have made that got their companies into serious trouble. Here’s another mistake that on the face of it ...
Security Boulevard

Detecting NTDS.dit extraction attempts on domain controllers

NTDS.dit is the Active Directory database on a domain controller. It holds directory objects, password hashes, and other identity data that make it a high-value target. If an attacker can copy or ...