Windows Server 2003 Security: A Technical Reference

Chapter 10. Securing Active Directory

If an attacker can obtain unfettered access to Active Directory (AD), he gains absolute control over every computer, resource, and user account in the forest. Even limited privileged access can provide a wealth of information useful in future attacks. Active Directory is not only the seat for critical information in your network, but it is also the repository for major security controls and information such as password policy, security configurations, and audit policy. To ensure security for a Windows Server 2003 or Windows 2000 Active Directory network, you must secure the Active Directory. The steps that you take to do so will also support and improve the security status of other Windows systems and the ...