E25 - Clean Up Your Act: Boosting Security Through Account Hygiene

In this comprehensive episode, we explore critical aspects of managing IT security, focusing on Active Directory audits, password hygiene, and privilege management. We share practical strategies for conducting thorough security audits, managing group policies, and ensuring effective password practices using tools like CrowdStrike and Microsoft Azure.

Emphasis is placed on minimizing over-privileged accounts, leveraging secure remote access tools, and implementing Multi-Factor Authentication (MFA) to enhance security. The discussion extends to the importance of dynamic employee groups, regular auditing of both AD and non-AD integrated systems, and the necessity of maintaining detailed documentation for enhanced cybersecurity. Real-life examples and practical advice underscore the importance of curiosity and constant improvement in IT security practices, with regular reviews and a proactive approach to identifying and mitigating risks.

 

Microsoft Entra Password Protection - Microsoft Entra ID | Microsoft Learn https://learn.microsoft.com/en-us/entra/identity/authentication/concept-password-ban-bad-on-premises

Group Policy: Automatically Delete User Profiles Older Than Certain Number of Days Win 10 not working. - Microsoft Q&A https://learn.microsoft.com/en-us/answers/questions/441800/group-policy-automatically-delete-user-profiles-ol

 

00:00 Introduction and Episode Overview

00:04 Listener's Request: Active Directory Audit

02:14 Account Hygiene Tips and Auditing Processes

02:36 Handling Stale Accounts and Group Policies

04:48 Group Memberships and Elevated Access

09:35 Password Management and Security

16:41 Auditing GPOs and Password Expirations

19:56 Dynamic Groups and Documentation

29:34 File Sharing and Ransomware Stories

31:38 The Dangers of Open Shares

32:37 The Importance of Regular Audits

32:55 Onboarding and Job Role Audits

33:49 Offboarding and Permission Management

34:48 Curiosity in Cybersecurity

35:40 Overprovisioning Security Permissions

41:12 Vendor Access and Security Tools

46:30 Monitoring and Auditing Best Practices

47:57 Tools and Techniques for Better Security

51:36 The Importance of Continuous Improvement

01:01:52 Final Thoughts and Listener Engagement