How to Secure Active Directory (AD Tiering) - Tutorial 15 min

[@simon9740]

A public version of the script would be awesome, thanks for the video

[@JimmieBerk]

I think it's important to also note, that in a live environment - You can't just switch service accounts around. As there are dependencies. A Service Account is often used across of servers, which would after tiering be divided into Tier 0 and Tier 1. I like the overall idea here, it's something i implement myself and having a nice script to help is top notch! Though i must say in a operational structure, where u can't just go offline on servers etc, you need to analyze each server for URA (User Right Assignments) And figure out, if you break service accounts after GPO's are applied. Thanks for the video :)

[@magnus8664]

Is the script public?

[@aleksandargelevski6617]

Great video - Is the script availble, how/where ?

[@malagicsa]

Can you explain what will be tier 0, tier 1 servers... ? Great Video.

[@JimmieBerk]

Tier 0 = Domain Controllers, PKI, ADFS, SCCM, SCOM, Exchange IDM/IAM, AAD Connect/Sync server, Backup and hypervisors. Tier 1 servers could be the rest of your server infrastructur. E.g., som SQL Servers, fileservers etc.

[@50PullUps]

Comment section: if you simply obtained the script and applied the configs to your sandbox environment, your knowledge and skills will only suffer. Recreate the commands by slowly scrubbing through the video if you want to enhance your understanding. There are no shortcuts. Or just search online.

[@dcmediaproduction4920]

Is the scripts available? And where ? Thanks

[@kevinokura7547]

It would be great if the script was shared. It would make the video more useful. @Truesec

[@esmershikhamirli8280]

Is it possible to get the scripts? I haven't found any other resources for this

[@BoFamille]

Hi, great video, how can we have the template script, thanks ?

[@netcc8]

Can I have the script? TX

[@lucaskenter1263]

Great explanation, but.. Moving servers, drag n drop?! What is the expected impact on the working of the server? What happens when I move my DC’s to the tier 0 folder?

[@TheWilsterman]

You can't move DCs from built-in OU Domain Controllers, to tier 0 OU.

[@MikaelNystrom]

Domain Controllers are never moved, they are still Tier 0 in the OU they are located

[@frabricetrace]

Hello, would it be possible to have the script please?

[@CP-ki1mf]

Great video. Can you share the script?

[@NunoSilva1975]

Can we have the scripts, thanks in advanced

[@sviluppodotnet]

Can I have the script please?

[@somebodycommented]

Whos the winner ? How to know ?

[@doctorwhojr.2022]

Link to the script?

[@TheFrenchStickman]

Hi, thanks, can you share your script please ?

[@ASUS61234]

Can you share your script please

[@joonahk]

Why do you even share video like this if you don't share the script you are using? O_o

[@homayoonfayaz1241]

the script please, tnx

[@SimZoneStudios]

Basically you went through all of the work of setting up a tiering system only to revert back to the classic "Domain Admin has access to everything" model. The point of tiering is to segment administrative access and not expose privileged accounts more than needed. You exposed the T0 accounts to risk by allowing them to log on to a potentially compromised workstation in an upper tier. Baaaaaad!