2 docs tagged with "gmsa"

The enterprise access model and Tier 0, privileged access workstations, admin account separation, Protected Users and authentication policy silos, Windows LAPS against AD and Entra, gMSA, Kerberos and NTLM hardening, AdminSDHolder, Recycle Bin, dangerous ACLs, and the Defender for Identity posture assessments mapped to these controls.

A diagnostic workflow for Defender for Identity, from sensor install failures and services stuck starting, through every documented health issue and its fix, to the audit policies that feed detections and why a known-bad action raised no alert.