Active Directory Security Best Practices

AD Security is a very broad topic. 2000-2010, administrators just had to deal with script kiddies chasing fame, but today, things are way more complicated. Attacks are performed on far more valuable targets, such as identities, state secrets, and intellectual property. It is no longer about taking full control of a computer infrastructure either; even having access to certain pieces of data is sufficient to do significant damage. In the final days of the last US presidential election, certain emails had been released to the public, and that was enough to change a lot of votes. Stories about WikiLeaks are also a great example of this. Also, in computer infrastructure, we no longer can identify good or bad people. Most of the recent security breaches have involved some sort of support from inside. This is why people are starting to talk about...