Part 6 – Microsoft 365 / Entra ID Federation
Part 6 – Microsoft 365 / Entra ID Federation Part 6 – Lab Microsoft 365 / Entra ID Federation Connect Your On‑Prem AD to the Cloud – True Hybrid Single …
Part 5 – External Access with Web Application Proxy & MFA
Part 5 – External Access with Web Application Proxy & MFA Part 5 – Lab External Access with Web Application Proxy & MFA Publish Exchange OWA Securely to the Internet …
Part 4 – Exchange OWA as a Federated Relying Party
Part 4 – Exchange OWA as a Federated Relying Party Part 4 – Lab Exchange OWA as a Federated Relying Party Single Sign‑On for Outlook Web App with ADFS – …
Part 3 – Lab Phase 1: Domain Controller, CA & First ADFS Server
Part 3 – Lab: ADFS Installation & Configuration (2016) Part 3 – Lab ADFS Installation & Configuration (2016) Prerequisites, CA Template, DNS, and Full ADFS Server Setup Home Part 2 …
Part 2 – ADFS Foundations: Concepts, Protocols & Terminology
Part 2 – ADFS Foundations: Concepts, Protocols & Terminology Part 2 ADFS Foundations Concepts, Protocols & Terminology – The What, Why and How Home Part 2 – Concepts Part 3 …
LAPS Auditing, Alerts & Management Dashboard – Complete Guide (Part 3)
LAPS Monitoring, Alerts & Troubleshooting – Complete Guide Active Directory • Security • LAPS Monitoring MAHARJAN-BINOD July 21, 2026 18 min read LAPS, Monitoring, Alerts, Troubleshooting, Event Logs Table of …
Windows LAPS Advanced GPO Settings – Deep Dive (Part 2)
Windows LAPS Advanced GPO Settings – Deep Dive (Part 2) Active Directory • Security • LAPS Deep Dive MAHARJAN-BINOD July 20, 2026 18 min read LAPS, Windows Server 2025, GPO, …
How to Implement LAPS on Windows Server 2025
LAPS on Windows Server 2025 – Implementation Guide Active Directory • Security MAHARJAN-BINOD July 17, 2026 12 min read LAPS, Windows Server 2025, AD Security Table of Contents Introduction Prerequisites …
Understanding Kerberoasting and the Vulnerability of SPNs
Active Directory (AD) relies heavily on the Kerberos protocol for authentication. While highly secure when configured correctly, legacy architectural decisions and traditional service account management create significant security blind spots. …
The Domain Controller Death Trap: Hardening the Print Spooler in 2026
Active Directory Vulnerability: The Print Spooler on Domain Controllers Posted on May 14, 2026 | By Security Research Team Even in 2026, the Print Spooler remains a Tier-0 attack vector. …