Top 10 Mistakes Made With Using Microsoft As The Foundation Of Your Identity Access Management Systems

No ratings

Presented at BSidesSLC 2014 by

Every year we ask our Identity Access Managements Systems to do more and support more types of authentication for example SAML or Smart Cards. At the heart of the majority of organizations are Microsoft Products like Active Directory, Certificate Services, and ADFS. Over the years I have seen some very commonly made mistakes from very large organizations to very small ones. Understanding the top 10 list you will be surprised really how common these mistakes are made. A few of the items on the list are: Why does my login randomly fail and the time server settings everyone forgets to make on Domain Controllers Forgetting to get a registered OID for your PKI and how this means we all can't be friends Overcoming your fear of ADSI edit and places in the AD Schema everyone forgets to cleanup over time Not understanding the most important part of a PKI and hint it's not the certificate server it's a text file Why can't we all just use SQL…the dangers and pitfalls of Virtualizing Microsoft IAM products that use JET databases All those DNS directories that start with underscore and why you should actually go inside them