How to protect AD against external misuse

%3CLINGO-SUB%20id%3D%22lingo-sub-1402211%22%20slang%3D%22en-US%22%3EHow%20to%20protect%20AD%20against%20external%20misuse%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1402211%22%20slang%3D%22en-US%22%3E%3CP%3EI%20work%20for%20a%20Call%20Center%20company%20and%20because%20the%20consequences%20from%20the%20COVID-19%20pandemic%20we%20had%20to%20put%20most%20of%20employees%20to%20work%20from%20home.%3C%2FP%3E%3CP%3EAs%20we%20don't%20a%20proper%20VDI%20infrastructure%20the%20corporation%20decided%20to%20hired%20these%20VDI%20as%20a%20service.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3ENow%20we%20are%20in%20a%20security%20dilema%20as%20we%20have%20to%20provide%20a%20external%20integration%20with%20our%20Active%20directory%20to%20hired%20company%20can%20identify%20and%20authenticate%20ours%20users.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EAs%20we%20don't%20have%20a%20AD%20specialist%20in%20our%20Windows%20IT%20team%20I%20started%20to%20look%20for%20something%20in%20the%20web%20about%20manners%20to%20provide%20a%20external%20connection%20to%20our%20AD%20without%20expose%20more%20than%20I%20should%20to%20a%20external%20company.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EHow%20can%20I%20do%20it%3F%3CBR%20%2F%3EIs%20it%20safe%20stablishe%20a%20one%20way%20trust%20relationship%20from%20external%20AD%20with%20ours%3F%3C%2FP%3E%3CP%3EDoes%20anybody%20can%20share%20your%20experience%20related%20to%20this%20cenario%20with%20me%3F%3CBR%20%2F%3E%3CBR%20%2F%3ERegards%2C%3CBR%20%2F%3EMarcelo%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1402211%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EManagement%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Regular Visitor

I work for a Call Center company and because the consequences from the COVID-19 pandemic we had to put most of employees to work from home.

As we don't a proper VDI infrastructure the corporation decided to hired these VDI as a service.


Now we are in a security dilema as we have to provide a external integration with our Active directory to hired company can identify and authenticate ours users.


As we don't have a AD specialist in our Windows IT team I started to look for something in the web about manners to provide a external connection to our AD without expose more than I should to a external company.


How can I do it?
Is it safe stablishe a one way trust relationship from external AD with ours?

Does anybody can share your experience related to this cenario with me?

Regards,
Marcelo

0 Replies