Harden AD

Step One: Document and Audit

• 

People, Processes, and Technology

People

• weakest link
• 

Protected Users Group

• This group can be used to restrict what members of this privileged group can do in a domain. Adding users to Protected Users prevents user credentials from being abused if left in memory on a host.
• Get-ADGroup -Identity "Protected Users" -Properties Name,Description,Members
• 

Process

• Enforce policies
• 

Technology

• https://enterprise.hackthebox.com/academy-lab/30000/2125/modules/143/1277