Active Directory Security Baseline: Explained
Every business organization is different from one another. They serve their customers differently, their end users behave differently, and ultimately, the way that the organization handles cyber threat is vastly different from one another. Healthcare organizations focus on data protection and uptime, while financial organizations focus on data integrity. No two organizations can follow the same cybersecurity plan. However, Microsoft and other regulatory and non-regulatory bodies recommend implementing industry-standard configuration security baselines to help navigate the complex field of securing the network environment.
How can Security Baselines be Utilized?
Administrators can use security baselines to:
- Ensure that both user and computer configuration settings are in-line with the most recent baseline suggested.
- Use Microsoft-recommended Group Policy Object baselines to improve the overall security posture of their environment and decrease their attack surface.
The most recent security baseline from Microsoft recommends administrators to relax minimum password length limits and the minimum password length audit security settings. This effectively means admins are required to enforce users to use passwords between 14 and 128 characters, provided a solid SSO and 2FA system is in place.
Administrators can use these baselines to access the state of security in the organization and work towards monitoring the environment while constantly closing any security gaps and reducing the threat surface.
Related Articles
How to Monitor Active Directory Security Group Membership Changes
How to Detect Security Group Membership Changes It is a recommended security practice for administrators to keep track of membership changes made to security groups. If this event is not tracked, an attacker might join a security-enabled group and ...
Active Directory Objects
Real-world entities such as users, computers are represented as objects in Active Directory. Objects are the fulcrum for the very existence of Active Directory. One important aspect with respect to object characteristics is that some of the objects ...
How to check Active Directory Replication - Explained
How to Check Active Directory Replication Active Directory replication is a feature that allows the Domain Controllers to share and update the directory data across the forest. This ensures that any change made on a domain controller is propagated to ...
Active Directory User properties – Security tab
The security tab of the computer properties window allows you to configure access permissions on the user object. The security tab allows you to grant or deny permissions to other groups and users over the user object. In the “group or user names” ...
Benefits of Active Directory
The benefits of Active directory usage are manifold. It makes the task of network administration simpler by maintaining a central repository of information. It provides Off-Site a single destination to look out for information. Highly secured access ...