Security

Microsoft Active Directory stores user logon history data in the event logs on domain controllers. Starting from Windows Server 2008 and up to Windows Server 2016, the event ID for… Read More »How to Get Active Directory User Login History using PowerShell

The rules and settings configured for an organizational unit (OU) in Microsoft Active Directory (AD) apply to all members of that OU, controlling things like user permissions and access to… Read More »How to Get a List of All Users from a Specific OU with PowerShell

Every computer account, like every user account, is a door into your network. If computer accounts are not protected with proper password settings and disabled in a timely manner, or… Read More »How to Export a Computer List from Active Directory

Export NTFS Permissions to Spot Overexposure of Your Critical Data The less data is exposed, the safer it is. To ensure that only eligible users have access to critical systems… Read More »How to Export Folder Permissions to Excel or CSV File

Keep an Eye on Login Password Changes in SQL Server to Minimize the Risk of Account Compromise No user should ever change a login password for Windows SQL Server without… Read More »How to Track Login Password Changes in SQL Server

How to Check User Group in Windows Servers to Reduce Your Attack Surface Area If a local user account is compromised by an attacker or malware, all resources that user… Read More »How to List All User Accounts on a Windows System

Group Policy Objects (GPOs) can provide configurations for access to shared resources and devices, enable critical functionalities or establish secure environments. If some of the GPOs are deleted, users may… Read More »How to Detect Who Deleted a Group Policy Object

Why It Is Important Malicious individuals who obtain administrative access to your Active Directory domain can breach the security of your network. Any changes to a user account password made… Read More »How to Detect Active Directory Password Changes

Why It Is Important New scheduled tasks created on Windows Server by someone who doesn’t belong to your IT department might indicate a virus attack, which could result in a… Read More »How to Detect Who Created a Scheduled Task in Real Time