Articles by tag: active-directory

PowerShell GUI for AD tech support

Automate tech support routine: hostname search, PC diagnostics, remote commands in PowerShell GUI. Deployment experience in a domain with 5k+ stations. Speed up ticket processing.

Kerberos for developers: protocol and SSPI

Breakdown of Kerberos in Active Directory: from TGT to delegation. C++ code with CNG, PKINIT, U2U. For middle/senior dev. Master impersonation without a domain.

ACL in Active Directory: ACE types and control rights

Breakdown of 22 ACE types, ACCESS_MASK, extended rights and validated writes in AD. For middle/senior developers: inheritance, flags, bypassing checks. Study the security mechanics.