HomeSystem

Microsoft will allow Domain Controllers to be allowed to have an internet connection

At the same time, they also phased out the Active Directory (AD) infrastructure. However, other organizations are still using Domain Controllers (DCs) in hybrid or on-premises environments.

What you may not know is that the DC is also capable of Active Directory Domain Services (AD DS), which means that if the DC is infected with malicious code then basically all your accounts and systems are compromised. A few months ago, Microsoft issued a warning about an AD privilege escalation attack.

Microsoft has also provided detailed instructions on how to set up and secure DC, but they are currently preparing some updates to the process.

Microsoft will allow Domain Controllers to be allowed to have an internet connection Picture 1

Previously, Microsoft emphasized that DCs should not be connected to the internet under any circumstances. With the changing cybersecurity landscape in mind, Microsoft has amended the rule that DCs should not have unattended access or the ability to run a web browser. Basically, it is possible to have a DC connected to the internet as long as that access is tightly controlled with the right protection mechanisms.

For companies using hybrid environments, Microsoft recommends that IT admins at least implement on-premises AD security through Defender for Indentity.

Basically, Microsoft still recommends that organizations operating in an air-gapped environment do not access the internet for legal and regulatory reasons. Other businesses can consider adding internet connectivity for Domain Controllers if they feel it's necessary and in line with internal policies.

Microsoft further shared that running web browsers on DCs should be limited by technical and policy controls. In addition, internet access to and from DCs in general also needs to be strictly controlled.

Microsoft recommends that all organizations move to a cloud-based approach for identity and access management, and move from Active Directory to Azure Active Directory (Azure AD). Azure AD is a complete cloud identity and access management solution for directory management, allowing access to cloud and on-premises applications, and protecting your computer from security threats. secret.

5 ★ | 1 Vote

You should read it

May be interested

  • How to Set Up Internet Connection Sharing for Windows XPHow to Set Up Internet Connection Sharing for Windows XP
    microsoft internet connection sharing enables a computer connected to the internet via a cable or dsl modem to share its connection with other computers connected to it. click start, and then click control panel.
  • How to turn off Internet Connection Sharing on WindowsHow to turn off Internet Connection Sharing on Windows
    sometimes sharing your internet connection from your computer will slow down and reduce internet connection performance especially when you watch movies online or download certain files to your computer. in addition, the network line is not stable, it is best to turn off the internet connection sharing service on your computer.
  • Instructions for installing Active Directory on Windows Server 2008Instructions for installing Active Directory on Windows Server 2008
    microsoft active directory provides a centralized solution, managing and storing network resource information across the entire domain. in addition, active directory using domain controllers is responsible for storing and distributing storage for all users in the system, and setting up windows server 2008 as the domain controller role.
  • Warning: Global Internet may be interrupted in the next 48 hoursWarning: Global Internet may be interrupted in the next 48 hours
    the internet and digital internet corporation (icann) will make changes to the security keys for dns (domain names) for maintenance and this may cause the global internet to have connectivity problems in about 48 coming.
  • List of Internet domain names by countryList of Internet domain names by country
    the official list of tlds (top-level domains) by country is maintained by internet assigned numbers authority (iana).
  • 7 best PS4 gaming controllers7 best PS4 gaming controllers
    the playstation 4 comes with a variety of gaming controllers. whether you're looking for something more affordable than the official handle, or want to find a more luxurious model, there are plenty of options to consider.
  • How to Disable Internet Connection Sharing in Windows 11How to Disable Internet Connection Sharing in Windows 11
    when internet connection sharing is enabled on a computer, any other computer on the lan can access the internet. while this is a great feature for sharing internet, it also poses some risks to users.
  • Instructions for joining the domain on Windows 8.1 (Part 2)Instructions for joining the domain on Windows 8.1 (Part 2)
    since nt 3.5, microsoft client operating systems are joined to the windows domain. each new client uses the same technique as in the previous article that the network administrator introduced to you. however, to the next version of the operating system, microsoft adjusted additional steps in the process of joining the domain to resolve dns connectivity issues and secure configuration settings.
  • Check hidden connections to the Internet in WindowsCheck hidden connections to the Internet in Windows
    is your internet connection slower than usual? is your computer infected with malware, spyware or adware, are they running in the background and consuming bandwidth without your knowledge? here are some tips to help you check the connections from your computer to the internet
  • Your Windows 10 computer is slow to connect to the Internet, this is a fixYour Windows 10 computer is slow to connect to the Internet, this is a fix
    there are many reasons why your internet connection is unusually slow: due to hardware devices, websites you are visiting, ... if a good day you feel your windows 10 computer is connected internet connection is unusually slow, please apply the following solutions to fix.

System