Folks,
Today 85% of organizations worldwide operate on Microsoft Active Directory, and at these organizations, IT departments extensively make use of one of Active Directory's most valuable and powerful capabilities, Administrative Delegation.
 |
| Delegation of Administrative (Privileged) Access in Active Directory |
Administrative Delegation is a powerful capability wherein administrative (privileged) access can be delegated to various individuals or groups to enable them to carry out various common administrative functions such as account provisioning, password resets, group membership changes, access management, Kerberos settings, group policy management etc.
Active Directory makes is very easy to precisely delegate administrative access, and for years, thousands of organizations worldwide have relied on administrative delegation to secure delegate responsibilities for most aspects of IT management.
Unfortunately, while precisely delegating administrative access in Active Directory is easy, once delegated, trying to precisely identify and lockdown exactly who is delegated what administrative access in Active Directory is very difficult.
As a result, today, at most organizations, there is a substantial amount of delegated administrative access provisioned in their Active Directory, yet organizations do not know exactly who is delegated what administrative access, where and how within their Active Directory, and this lack of precise (accurate) insight leaves organization substantially vulnerable.
In reality, today, these administrative delegations control everything such as who can create domain user accounts, reset account passwords, disabled the use of smartcards, modify group memberships, change Kerberos delegation settings, link group policies to OUs, delegate privileged access etc. and thus they substantially impact organizational cyber security.
The Top-50 Active Directory Delegated Administrative Access Reports
To maintain organizational cyber security, it is extremely important, and in fact paramount, for organizations to accurately identify (audit) and lockdown exactly who is delegated what administrative access, where and how in Active Directory.
To help organizations worldwide identify what administrative delegations they should have accurate and continuous insights into, we are sharing the list of the Top-50 Active Directory Delegated Administrative Access Reports.
 |
| The Top-50 Active Directory Delegated Administrative Access Reports |
Organizations that operate on Microsoft Active Directory today are advised to accurately identify and lockdown delegated administrative access, the proverbial "Keys to every door in the Kingdom" in their foundational Active Directory domains.
Best wishes,
Sanjay
