AD Certificate Services
Strong certificate mapping (KB5014754) in practice
Get certificate authentication ready for KB5014754 Full Enforcement: SID extension, altSecurityIdentities, KDC events 39/40/41 and the fixes that work.
Advanced
Guides tagged
#adcs
AD Certificate Services
Auditing AD CS certificate templates for ESC1-ESC4
Audit every AD CS certificate template for ESC1-ESC4: subject flags, EKUs, enrollment rights and template ACLs, with PowerShell and a safe fix order.
Intermediate
AD Certificate Services
Securing AD CS web enrollment against ESC8 and ESC11
Close NTLM relay to AD CS: find HTTP enrollment endpoints, enforce HTTPS and EPA, disable NTLM, remove Web Enrollment and enforce RPC encryption.
Intermediate
AD Certificate Services
AD CS hardening: closing ESC1-ESC8 misconfigurations
Harden Active Directory Certificate Services against ESC1-ESC8 misconfigurations with template controls, EPA, and enrollment monitoring.
Intermediate