Domain Controller Hardening
Firewalling domain controllers: ports, egress, admin access
Build a domain controller firewall policy: required AD ports, restricted RPC, no internet egress, and RDP/WinRM only from Tier 0 PAWs. Measure first.
Intermediate