AD CS enhancements, innovations, and security

Thanks for joining us for Windows Server Summit! If you have any feedback about AD, AD CS or about this session, please email ADFeedback@microsoft.com. 

Here’s a list of all the links we discussed during today's session:

1. Install the necessary Windows Updates to enable the 4K to 16K expansion: aka.ms/CertExtensionLimit
2. All the CA audit events are documented here – aka.ms/MonitorPKI
3. Securing Certificate Templates: Learn more at aka.ms/SecureCertTemplates
4. Mitigating NTLM Relay Attacks on AD CS​: Apply mitigation steps published at aka.ms/KB5005413
5. Strong Certificate Mappings:
• Certificate-based authentication changes on Domain Controllers: https://aka.ms/KB5014754​
• Intune related changes: ​
• aka.ms/IntunePKCSProfile: Connector update to include the SID extension in the certificates​
• aka.ms/IntuneSCEPProfile: SID info will be added as an alternate name in SAN extension​

​Thank you!