Using the free Quest powershell commands for active directory, we can do things like create multiple security groups based on a list of names in a .csv file. This can be a huge time saver if you regularly create groups/users in large batches.
First download the .msi from here, http://www.quest.com/powershell/activeroles-server.aspx and then install.
Next create your csv file with the
Read more ...
When it comes to securing your perimeter, you already do a great deal to comply with regulators. You understand the risk of an attack on your network from malicious code on the Internet. You have a firewall with intrusion detection. You have gateway anti-virus and you run vulnerability assessments on your external IP addresses.
But what are you doing to ensure your internal network is
In part 1 of this article I showed you how to setup a task that sends an email notification when a user locks out their Active Directory account. The shortfall was that it only notified you of an account being locked out, but didn't tell you WHO was locked out. It's easy enough to figure out which user it was if you go to the security log on your domain controller, filter out all event 4740's
Ever wanted to get an email notification when a user locks out their account? Maybe not, but it is a good security practice.
Even if you have a good account lockout policy setup in group policy, something like this:
In theory, someone could still come back every 4 hours and make another 5 login attempts. Would you ever know if the same user account kept getting locked out over and over
theWEBcentric
Integrated Solutions
Security Solutions
Construction Services
Facility Management
