From Workstation to Domain Admin - Why Secure Administration Isn't Secure and How to Fix It

Explore the critical vulnerabilities in secure administration practices and learn effective solutions in this comprehensive conference talk. Delve into the evolution of administration, examining traditional and secure methods, including smart cards and group policies. Uncover potential weaknesses in ILO systems and multi-factor authentication. Investigate advanced concepts such as admin forests, cross-forest administration, and the importance of isolating privileged credentials. Gain insights on focusing on Tier 0 systems, convincing administrators to adopt better practices, and addressing common issues in virtual environments. Equip yourself with the knowledge to strengthen your organization's administrative security and protect against potential threats.

Introduction
Overview
Current State of Security
Evolution of Administration
Admins Everywhere
Traditional Admin Methods
Secure Admin Methods
Smart Cards
Group Policies
Log on Locally
ILO Vulnerability
ILO Patch Summary
Manage Auditing Security Log
How to subvert MFA
Use MFA
Cyberark
Admin Forest
Cross Forest Administration
Separating Accounts
Isolate Privileged Credentials
Focus on Tier 0
Convince Admins
Virtual Environment
Common Issues