Hello, and welcome to Pluralsight! This module is entitled
Secure Hybrid Active Directory Accounts.
Hopefully you're coming into this second lesson from the first
module in which we looked at Windows Server Security and some of
the Microsoft cloud‑based and local products you can use to help
enforce system security,
things like preventing malicious or suspected
malicious code from running, and so on.
In this lesson, we're concerned with account security.
So we'll configure password policies for Active Directory users, we'll
enable password block lists, we'll understand the protected users global
groups, we'll manage account security on RODCs, read‑only domain
controllers, we'll pick up some best practices from Microsoft on
hardening your domain controllers,
that is, your read/write DCs, and then we'll finish with a flourish by
covering authentication policies and their associated silos.
In this course,
Secure On‑premises and Hybrid Infrastructure, we
have six modules. As I mentioned,
the first module was about securing the Windows Server OS. Now we're
actually in module one of two covering account security,
as you can see.
Then, in the fourth lesson, we'll remediate Windows
Server Security issues using Azure. Then we'll do Windows Server networking, and lastly, storage