Object & ACL Security
AdminSDHolder and SDProp: cleanup and monitoring
Baseline the AdminSDHolder ACL, find orphaned adminCount=1 accounts, reset their ACLs safely, trigger SDProp on demand, and alert on AdminSDHolder changes.
Intermediate
Guides tagged
#persistence
Trusts & Forest Design
Cleaning up SIDHistory after AD migrations
Find, assess and safely remove sIDHistory left over from domain migrations: dangerous SIDs, ACL re-permissioning, staged removal, rollback limits and detection.
Intermediate