Manage Learn to apply best practices and optimize your operations.

Perform a Windows Active Directory security configuration assessment

How secure is your configuration of Active Directory? Learn how to perform a security configuration assessment on such a directory in this expert response .

According to a recent article, an audit of the Department of Homeland Security's Microsoft Windows Active Directory at its headquarters revealed that its implementation failed to fully comply with the department's security guidelines. How can you verify the security configurations of systems when adding to or expanding Active Directory in order to avoid this mistake?

The quick answer is to have a quality assurance group that does security audits on any application or service added...

to the infrastructure. In reality it's a matter of defining a security strategy and the appropriate testing standards that can be applied to any service being implemented. A good start is to test the application against the Open Web Application Security Project (OWASP) Top 10 application risks. This list identifies the most common deficiencies found in application deployments.

In addition, you should work with your compliance and security organizations to include other tests based on your organization's requirements: For example you might need to do a PCI self-assessment if the application in question handles credit card information, or a HIPAA review if you deal with health care info. There isn't a one-size-fits-all Windows Active Directory security configuration assessment, but between OWASP and your security team, you should have a good list to build from.

This was last published in July 2010

Dig Deeper on Active Directory security

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.