Service accounts with 2012 passwords still run your domain. ⚠️

Covering: gMSA setup, Kerberoasting defense, and the GPO you forgot.

Microsoft is killing RC4. Here's what breaks if you're not ready. ⚠️

If you haven't checked RC4 usage in your enviroment, Microsoft will make you find out what happens if you don't soon.

NTLMv1 Is Probably Still Running Even With LMCompatibilityLevel Set to 5

The fix is a two-step process audit first, then enforce. Most environments skip the first part entirely.

LLMNR and mDNS are on by default. Hackers know this. ⚠️

One GPO change closes a credential theft vector that's been sitting open for years.

🔑 Your RDP sessions are wide open to interception. Here is the fix.

Deploying proper certificates to your RDP hosts takes about 30 minutes and stops MITM attacks cold.

Most AD environments fail at least 6 of these 25 checks

Score yours in 3 minutes. Free interactive checklist.