Trusts & Forest Design
ESAE Red Forest vs the enterprise access model in 2026
Why Microsoft retired ESAE as the default, what the enterprise access model asks you to build instead, and when a bastion forest or PAM trust still makes sense.
Advanced
Guides tagged
#forest-design
Trusts & Forest Design
SID filtering and selective authentication, step by step
Configure and verify SID filtering, quarantine and selective authentication on AD trusts with netdom and PowerShell, including trustAttributes and events.
Intermediate
Trusts & Forest Design
Hardening AD trusts and forest boundaries
Why the forest — not the domain — is the AD security boundary, and how to lock down trusts with SID filtering, quarantine, and selective authentication.
Intermediate