hard20 pts · first answer countsidentity-securityprivileged-access
Keeping Tier 0 logons on Tier 0 hosts
You want Domain Admin accounts to be unable to get a Kerberos TGT from any machine except your Tier 0 PAWs and domain controllers, enforced by the DCs. Which AD feature does this?
Discussion 0
Join free to post in the discussion.
Related questions
- Which login is really two-factor?Cybersecurity Analyst
- Why passwords are saltedCybersecurity Analyst
- Brute force or password spraying?Cybersecurity Analyst
- Authentication or authorization?Cybersecurity Analyst
- What a Kerberos TGT is forCybersecurity Analyst
- Where the Kerberos KDC runsCybersecurity Analyst
- Windows event for a failed logonCybersecurity Analyst
- Event for a locked-out accountCybersecurity Analyst