Tutcyber

Windows Server log

Logging Basics Logs are records of events that happen in your computer,either by a running process.They help you track what happened and troubleshoot problems. The most common location for logs in Windows is the Windows Event Log . It contains logs from the operating system and several applications such as SQL server or IIS .The logs use a structured data format,making then easy to search for  analyze.Additionally,some applications write to log files, for example IIS access logs in text format . Auditing Windows Server Audit policy Establishing audit po…

KerberOS Authentication and logs

Kerberos is an authentication protocol that is used to verify the identity of a user or host. The Kerberos key distribution center (KDC) is integrated with other Windows server security services and uses the domains Active Directory Domain Services Database. The key benefits for using for using kerberos include: Delegated authentication Single sign on Interoperability More efficient authentication to servers. Mutual authentication

Server management with Windows Admin Center

Active Directory Groups Security groups are used to collect user accounts,computer accounts and other groups into manageable units. 1. For Active Directory,there are two types of administrative responsible: Service Administrators. Data Administrators. 2. There are two types of groups in Active Directory: Distribution groups: Used to create email distribution lists. Security groups: Used to assign permission to shared resources Group scope: Groups are characterized by a scope that identifies the extent to which the group is applied in the domain tree o…

Restrict and protect sensitive domain accounts

Separate administrator account from user accounts. Privilege account: Allocate administrator accounts to perform the following administrative duties only.    1.Minimum: Create separate accounts for domain administrators,enterprise administrators or the equivalent with appropriate administrators.    2.Better: Create separate accounts for administrators that have reduced administrative rights,such as accounts for workstation administrators and accounts with user rights over designated Active Directory Organizational Units (OUs).    3.Ideal: Create multip…

Active Directory

Active Directory Domain Services (ADDS) stores information about objects on the network and makes this information easy for administrators and users to find and use. Objects typically include shared resources such as servers,volumes,printers and the network user and computer account. Security is integrated with Active Directory through authentication and access control to objects in the directory via policy-based administrators. Features: A set of rules,the schema. A Global catalog. A query and Index Mechanism. Active Directory Account Default local acc…