Object & ACL Security
Finding and removing DCSync rights in Active Directory
Audit who holds DS-Replication-Get-Changes-All and equivalent rights on the domain root, remove the ones that should not exist, and alert on DCSync.
Foundation
Guides tagged