Event banner
Event details
9 Comments
Thank you for joining us this week for the Windows Server Summit! Q&A is now closed, but all sessions are available on demand so you can watch and learn when it is convenient for you. We hope you enjoyed the event.
KiliMucMicrosoft
Great session. I really like your explanation why Tier 0 is important even we have the Enterprise Access Model => Tier 0 is key. If the attacker controls Tier 0 he controls everything. Maybe here is a good link to protect Tier 0 in the On-Premises world https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/protecting-tier-0-the-modern-way/bc-p/4099397#M5944 The combination of Azure RBAC, with PAWs and OnPrem T0 account isolation it is the right way- Great session. I wish there was a better guide / in-depth session to the 'in-the-middle' solution however. Not the old tier model, and not the model where everything is running in Azure. But perhaps one that considers DCs, etc running on premises, but branching out to all these cloud solutions (like Entra). It seems like a lot of guidance today skips over those details.
- Eric thank you for this session. This made things much clearer and complementary to the Tier 0 security blog post here: https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/protecting-tier-0-the-modern-way/ba-p/4052851
- Great post to link over to Karl!
- do you plan to reveal the command in Azure Monitor History? eventually do not reveal passwords or such to the logs (once for security) but at least which commands have been issued.
- Pierre_RomanThis event focuses on Windows Server. But i can pass this question to the Azure Monitor PM.
- Karl if you're asking if the commands themselves will be captured, I think that's one we'll have to take to the PG to be answered, as I don't have the answer if there is anything down the road to better capture what has been run.
Welcome! Protecting Active Directory from management plane attacks is starting now. If you have any questions or feedback for our product teams, please post them here in the Comments.
