# active directory Active Directory is a Windows network directory service for storing, managing, and retrieving identities and relationships among users, groups, and computers. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## How Does CockroachDB Automate SQL User Lifecycle Management? DevFeed: [How Does CockroachDB Automate SQL User Lifecycle Management?]() Original publisher: [Read original article]() Author: Pritesh Lahoti,Biplav Saraf,Sourav Sarangi Published: 2026-08-28T00:00:00Z Content type: tutorial Language: en Sources: [Cockroach Labs]() Topics: [CockroachDB](), [IAM](), [identity and access management](), [active directory](), [Entra ID](), [okta](), [Microsoft]() Tags: [active-directory](), [cockroachdb](), [entra-id](), [iam](), [identity-and-access-management](), [microsoft](), [okta]() ### AI overview The article addresses how CockroachDB automates SQL user lifecycle management and notes that large enterprises commonly rely on identity provider and identity and access management platforms such as Okta, Microsoft Entra ID, Microsoft Active Directory, and Ory. ### Source excerpt Fortune 1000 enterprises widely rely on major Identity Provider (IdP) and Identity and Access Management (IAM) platforms like Okta, Microsoft Entra ID, Microsoft Active Directory, and Ory. ## Native Windows automation without Docker, WSL, or workarounds DevFeed: [Native Windows automation without Docker, WSL, or workarounds]() Original publisher: [Read original article]() Author: Alex Petric Published: 2026-04-29T00:00:00Z Content type: article Language: en Sources: [Windmill Blog]() Topics: [Windows](), [Automation](), [PowerShell](), [active directory](), [Databases](), [C#](), [servers]() Tags: [active-directory](), [ai](), [automation](), [c-sharp](), [database](), [enterprise](), [powershell](), [servers](), [windows](), [windows-enterprise-powershell-ai]() ### AI overview This article explains how Windmill automates Windows servers as a native Windows service. It covers PowerShell, C#, SQL and MSSQL Kerberos authentication, Active Directory access, mixed Windows/Linux workers, approval workflows, and audit trails without requiring Docker or WSL2. ### Source excerpt How do I automate Windows servers without Docker? Windmill runs natively on Windows as a service with PowerShell, C#, MSSQL Kerberos auth, and Teams integration. ## Kerberoasting DevFeed: [Kerberoasting]() Original publisher: [Read original article]() Author: Matthew Green Published: 2025-09-10T12:00:00Z Content type: opinion Language: en Sources: [Matthew Green]() Topics: [Vulnerabilities](), [active directory](), [Authentication](), [Windows](), [ransomware](), [Cybercrime]() Tags: [active-directory](), [attacks](), [authentication](), [computer](), [microsoft](), [passwords](), [ransomware](), [vulnerabilities](), [windows]() ### AI overview This article explains Kerberoasting, a long-standing attack against environments using Microsoft Active Directory. It describes how the technique relates to service accounts, centralized authentication, and RC4, and connects it to the May 2024 ransomware attack on Ascension Health based on a letter from Senator Wyden to Microsoft. ### Source excerpt I learn about cryptographic vulnerabilities all the time, and they generally fill me with some combination of jealousy ("oh, why didn't I think of that") or else they impress me with the brilliance of their inventors. But there's also another class of vulnerabilities: these are the ones that can't possibly exist in important production software, ... Continue reading Kerberoasting -> ## Keycloak 26.0.5 released DevFeed: [Keycloak 26.0.5 released]() Original publisher: [Read original article]() Author: Keycloak Team Published: 2024-11-01T00:00:00Z Content type: release Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [LDAP](), [active directory](), [Microsoft]() Tags: [active-directory](), [idm](), [kerberos](), [keycloak](), [keycloak-release](), [ldap](), [microsoft](), [openid-connect](), [release](), [resolved](), [saml](), [sso]() ### AI overview Keycloak 26.0.5 is released with a change that creates LDAP users as enabled by default when using Microsoft Active Directory through the administrative interfaces. The release also includes resolved issues affecting the admin UI, login layout, documentation, identity provider migration, and AD entry updates. ### Source excerpt To download the release go to Keycloak downloads. Highlights LDAP users are created as enabled by default when using Microsoft Active Directory If you are using Microsoft AD and creating users through the administrative interfaces, the user will created as enabled by default. In previous versions, it was only possible to update the user status after setting a (non-temporary) password to the user. This behavior was not consistent with other built-in user storages as well as not consistent with others LDAP vendors supported by the LDAP provider. Upgrading Before upgrading refer to the migration guide for a complete list of changes. All resolved issues Bugs #31415 Selection list does not close after outside click admin/ui #33607 Fix v2 login layout login/ui #33618 No message for `policyGroupsHelp` admin/ui #33640 Customizable footer (Keycloak 26) not displaying in keycloak.v2 login theme login/ui #34301 Remove inaccurate statement about master realm imports docs #34450 [26.0.2] Migration from 25.0.1 Identity Provider Errors identity-brokering #34467 Do not rely on the `pwdLastSet` attribute when updating AD entries ldap ## Teleport 12 DevFeed: [Teleport 12]() Original publisher: [Read original article]() Author: kenneth.dumez@goteleport.com (Kenneth DuMez) Published: 2023-03-03T00:00:00Z Content type: release Language: en Sources: [Teleport]() Topics: [Device Trust](), [Kubernetes](), [Windows](), [active directory](), [Authentication]() Tags: [active-directory](), [authentication](), [device-trust](), [kubernetes](), [preview](), [release](), [windows]() ### AI overview Teleport 12 introduces Device Trust in preview, allowing administrators to require access from authenticated and trusted devices and integrate device authorization with Teleport RBAC. The release also previews passwordless certificate-based access for local Windows users without Active Directory and adds per-pod RBAC for Kubernetes access. ### Source excerpt An overview of all of the new features added to Teleport 12. Device Trust, Passwordless Windows Access for Local Users and more. ## Active Directory Security DevFeed: [Active Directory Security]() Original publisher: [Read original article]() Author: info@goteleport.com (Anish Devasia) Published: 2022-11-30T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [active directory](), [Security](), [Authorization](), [Authentication](), [Vulnerabilities](), [Windows]() Tags: [access-control](), [active-directory](), [authentication](), [authorization](), [guide](), [hardening](), [legacy](), [malware](), [permissions](), [security](), [vulnerabilities](), [windows]() ### AI overview An introductory guide to securing Microsoft Active Directory Domain Services (AD DS). It explains AD DS as a directory service for identity management, authentication, authorization, centralized account management, security policies, and permissions, then introduces its security risks and hardening practices. ### Source excerpt An introductory guide for how to secure and protect Active Directory Security (AD DS). ## Setting Up a CI/CD Pipeline for Power BI Report Source Control DevFeed: [Setting Up a CI/CD Pipeline for Power BI Report Source Control]() Original publisher: [Read original article]() Published: 2022-11-07T00:00:00Z Content type: tutorial Language: en Sources: [Mutt0-ds Notes]() Topics: [Azure DevOps](), [CI/CD Pipeline](), [DevOps](), [REST API](), [Git](), [active directory](), [JSON](), [API](), [dataset](), [Authentication]() Tags: [authentication](), [ci-cd-pipeline](), [dataset](), [devops](), [directory](), [environment-variables](), [git](), [json](), [repository](), [rest-api]() ### AI overview This article describes setting up a CI/CD pipeline through Azure DevOps to provide rudimentary version control for Power BI reports. Because .pbix files are binary, the pipeline uploads a report to a Power BI Premium workspace, uses the Power BI REST API and Tabular Editor 2 to extract metadata, and pushes the resulting textual representation back to a Git repository. ### Source excerpt One of the most annoying issues I have when working with Power BI files is that source control is a real pain. Considering that Microsoft... ## My first weeks at Acer Europe DevFeed: [My first weeks at Acer Europe]() Original publisher: [Read original article]() Published: 2022-10-16T00:00:00Z Content type: opinion Language: en Sources: [Mutt0-ds Notes]() Topics: [Azure](), [dashboards](), [Databases](), [etl](), [DevOps](), [Purview](), [active directory](), [data-governance]() Tags: [active-directory](), [azure](), [dashboards](), [data-governance](), [databases](), [developer](), [devops](), [etl](), [purview]() ### AI overview A Business Intelligence Developer reflects on their first weeks at Acer Europe, describing the transition from a small company to a large IT organization. The post covers the scale of its data, reporting, ETL, Azure services, and cross-team work, along with the information overload and learning challenges of the first week. ### Source excerpt This is a post for my future self when I will be asking myself: "How were my first days at Acer like?". Note: I'm working at Acer EMEA HQ,... ## How to Connect to Microsoft SQL Server Remotely Using Teleport DevFeed: [How to Connect to Microsoft SQL Server Remotely Using Teleport]() Original publisher: [Read original article]() Author: travis.rodgers@goteleport.com (Travis Rodgers) Published: 2022-09-20T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [sql-server](), [active directory](), [audit](), [Authentication](), [Security](), [Firewall](), [VPC]() Tags: [active-directory](), [audit](), [authentication](), [firewall](), [how-to](), [security](), [sql-server](), [vpc]() ### AI overview This tutorial explains how to connect to Microsoft SQL Server remotely using Teleport and Active Directory authentication. It recommends Windows authentication, limiting public exposure through network isolation, and enabling auditing for logins, sessions, and SQL queries. ### Source excerpt In this blog post, we'll look at how to connect to Microsoft SQL Server remotely using Teleport and Active Directory Authentication. ## Removing Calendar Invites using PowerShell + Azure CLI DevFeed: [Removing Calendar Invites using PowerShell + Azure CLI]() Original publisher: [Read original article]() Author: dustin@dustn.dev (Dustin Summers) Published: 2021-12-20T10:26:38Z Content type: tutorial Language: en Sources: [Dustin Summers]() Topics: [PowerShell](), [Command-line interface](), [openssl](), [active directory](), [Cloud]() Tags: [active-directory](), [azure](), [cli](), [commands](), [it-management-services-powershell-microsoft-azure-azure-active-directory](), [openssl](), [powershell]() ### AI overview The article describes removing calendar invitations created by a departing employee while retaining the employee's account temporarily. It discusses PowerShell access problems on updated Macs caused by differing OpenSSL versions and presents Azure CLI as an alternative for managing the Azure environment. ### Source excerpt Apart from my day job, I moonlight helping small-to-medium size companies' install and manage secure IT infrastructures, along with building and creating applications for them. I offer these services (and more) through my company, Attica, LLC. It is a passion of mine to help companies that are starting out have a solid IT/Cyber infrastructure that can scale with their company as these businesses are vulnerable and common targets of ransomware and phishing attacks. ## Identity-based, passwordless access to Windows hosts across all computing environments. DevFeed: [Identity-based, passwordless access to Windows hosts across all computing environments.]() Original publisher: [Read original article]() Author: ben@goteleport.com (Ben Arent) Published: 2021-12-15T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [Windows](), [passwords](), [active directory](), [Authentication](), [remote access](), [Security](), [servers]() Tags: [active-directory](), [authentication](), [password](), [rdp](), [remote-access](), [security](), [servers](), [windows]() ### AI overview The article introduces Teleport Desktop Access for Windows hosts, extending Teleport's passwordless, certificate-based access model from Linux to Windows. It discusses RDP, Active Directory, remote access, and security risks associated with password-based access and privileged directory services. ### Source excerpt An overview Teleport Desktop Access providing securing access to Windows Fleets. ## Attacking Smart Card Based Active Directory Networks DevFeed: [Attacking Smart Card Based Active Directory Networks]() Original publisher: [Read original article]() Author: CCob Published: 2020-10-04T19:31:42Z Content type: tutorial Language: en Sources: [Ethical Chaos]() Topics: [active directory](), [Authentication](), [certificates](), [private key](), [Cryptography](), [kerberos](), [public key]() Tags: [active-directory](), [attacks](), [authentication](), [certificates](), [cobalt-strike](), [hooking](), [kerberos](), [pin](), [pinswipe](), [pki](), [private-key](), [public-key](), [rubeus](), [smart-card](), [swipe](), [weaponize]() ### AI overview This article examines attacks against smart-card-enforced Active Directory networks. It explains that a physical smart card is not necessarily required for smart-card logon when the corresponding private key is available, describes certificate requirements and policy-related certificate abuse, and introduces PKINIT as public-key support for Kerberos pre-authentication. ### Source excerpt Introduction Recently I was involved in an engagement where I was attacking smart card based Active Directory networks. The fact is though, you don't need a physical smart card at all to authenticate to Active Directory that enforces smart card logon. The attributes of the certificate determine if it can be used for smart card [...] The post Attacking Smart Card Based Active Directory Networks appeared first on Ethical Chaos. ## Teleport Demo and Overview Video - Modern SSH DevFeed: [Teleport Demo and Overview Video - Modern SSH]() Original publisher: [Read original article]() Author: ev@goteleport.com (Ev Kontsevoy) Published: 2020-07-16T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [ssh](), [OpenSSH](), [Single sign-on (SSO)](), [active directory](), [audit](), [Authentication](), [Kubernetes](), [certificates](), [Linux](), [Raspberry Pi](), [Google]() Tags: [active-directory](), [audit](), [authentication](), [certificates](), [github](), [google](), [guide](), [k8s](), [linux](), [openssh](), [raspberry-pi](), [ssh](), [sso](), [video]() ### AI overview This video demonstrates how Teleport implements SSH best practices, including SSH certificates, single sign-on, browser and command-line access, centralized session auditing, Kubernetes access, and connections to edge devices such as a Raspberry Pi. ### Source excerpt Teleport allows easy implementation of SSH best practices. Here is a video that takes a deep dive into how Teleport works. ## How to Setup MS AD FS 3.0 as Brokered Identity Provider in Keycloak DevFeed: [How to Setup MS AD FS 3.0 as Brokered Identity Provider in Keycloak]() Original publisher: [Read original article]() Author: Hynek Mlnařík Published: 2017-03-23T00:00:00Z Content type: tutorial Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [active directory](), [saml](), [Authentication](), [certificates](), [TLS (Transport Layer Security)](), [Windows]() Tags: [active-directory](), [authentication](), [certificates](), [idm](), [installation](), [kerberos](), [keycloak](), [ldap](), [openid-connect](), [saml](), [sso](), [tls](), [windows]() ### AI overview A setup guide for configuring Microsoft Active Directory Federation Services 3.0 as a brokered SAML identity provider in Keycloak. It covers SSL/TLS prerequisites, certificate trust configuration, metadata import, signature settings, mapper configuration, and AD FS relying-party trust setup. ### Source excerpt This document guides you through initial setup of Microsoft Active Directory Federation Services 3.0 as a brokered identity provider Keycloak. Prerequisites Two server hosts: Microsoft Windows Server 2012 with Active Directory Federation Services (AD FS) installed. The AD domain will be named DOMAIN.NAME in this post. Keycloak server. This can be generally placed anywhere but here it is expected to be running on separate host DNS setup: The Windows host name will be fs.domain.name in this post The Keycloak host name will be kc.domain.name in this post Setup Keycloak Server Keycloak server has configured for SSL/TLS transport - this is mandatory for AD FS to communicate with it. This comprises two steps: Setup keycloak for incoming HTTPS connections - steps are provided in Server Installation guide. Export AD FS certificate into a Java truststore to enable outgoing HTTPS connections: In the AD FS management console, go to Service -> Certificates node in the tree and export the Service communications certificate. Import the certificate into a Java truststore (JKS format) using Java keytool utility. Setup the truststore in Keycloak as described in Server Installation guide. Setup Identity Provider in Keycloak Setup Basic Properties of Brokered Identity Provider In the Identity Providers, create a new SAML v2.0 identity provider. In this post, the identity provider will be known under alias adfs-idp-alias. Now scroll to the bottom and enter the AD FS descriptor URL into Import from URL field. For AD FS 3.0, this URL is https://fs.domain.name/FederationMetadata/2007-06/FederationMetadata.xml. Once you click "Import", check the settings. Usually, you would at least enable Validate signature option. If the authentication requests sent to the AD FS instance are expected to be signed, which is also usually the case, you have to enable Want AuthnRequests Signed option. Importantly, then the SAML Signature Key Name field that shows after enabling the Want AuthnRequests Signed o ## GPO: Instalacja GIMP'a 2.8 DevFeed: [GPO: Instalacja GIMP'a 2.8]() Original publisher: [Read original article]() Author: Tom Published: 2013-08-06T00:00:00Z Content type: tutorial Language: pl Sources: [Tomasz Gągor]() Topics: [Batch file](), [active directory](), [enterprise deployment](), [Script](), [Windows](), [configuration](), [App]() Tags: [active-directory](), [code](), [gpo](), [install](), [installation](), [policies](), [startup](), [windows]() ### AI overview A Polish tutorial explains how to deploy GIMP 2.8 through an Active Directory Group Policy startup script on Windows. The batch script checks whether GIMP is installed, silently removes an earlier manually installed version, and installs GIMP 2.8 from a network share. ### Source excerpt Raz na jakiś czas trzeba coś niestandardowego wrzucić do instalacji w Active Directory a że nie wszystkie aplikacje mają dostępne paczki MSI to trzeba się nieco natrudzić. Poniżej wrzucam skrypt, który instaluje GIMP'a 2.8 z domyślnego instalatora (wersja InnoSetup) przy okazji odinstalowując wcześniejsze wersje zainstalowane ręcznie. Zapisujemy poniższy kod jako np. gimp-install.cmd @echo off REM Installs GIMP cls echo ---------------------------------------------------- echo . echo . echo . Installing/Updating GIMP - Please Wait echo . echo . echo ---------------------------------------------------- REM Test if actual IF exist "%ProgramFiles%\GIMP\bin\gimp-2.8.exe" GOTO SkipInstall REM Exit the application taskkill.exe /F /FI "IMAGENAME eq gimp-2.8.exe" >nul REM Uninstall existing GIMP version, delete folder if exist "%ProgramFiles%\GIMP 2\uninst\unins000.exe" "%ProgramFiles%\GIMP 2\uninst\unins000.exe" /VERYSILENT :: Wait for 20 seconds ping -n 40 127.0.0.1 > NUL if exist "%ProgramFiles%\GIMP 2\" rd "%ProgramFiles%\GIMP 2\" /Q /S REM Install new version "\\serwerplikow.local\Instalki\GIMP\gimp-2.8.4-setup.exe" /VERYSILENT /NORESTART /DIR="%PROGRAMFILES%\GIMP 2.8" REM Skip installation if acctuall :SkipInstall REM Return exit code to SCCM exit /B %EXIT_CODE% Tworzymy nową regułkę GPO i zmierzamy do: Computer Configuration\Policies\Windows Settings\Scripts\Startup W nowym okienku wybieramy Show Files... Wklejamy plik skryptu do tego folderu i teraz możemy dodać go w tym samym oknie (Add...) - dzięki wrzuceniu skryptu w tym miejscu będzie się on automatycznie replikować na inne kontrolery. Skrypt będzie co prawda uruchamiany przy każdym starcie komputera ale pierwszy warunek będzie sprawdzać czy aplikacja jest zainstalowana więc nie spowolni to znacznie startu. ## Fortigate - VPN IPSec PSK XAuth z Android'a 4.x DevFeed: [Fortigate - VPN IPSec PSK XAuth z Android'a 4.x]() Original publisher: [Read original article]() Author: Tom Published: 2013-03-30T00:00:00Z Content type: tutorial Language: pl Sources: [Tomasz Gągor]() Topics: [Virtual Private Network](), [Android](), [Command-line interface](), [active directory](), [iOS]() Tags: [active-directory](), [android](), [cli](), [fortigate](), [fortios](), [ios](), [ipad](), [ldap](), [os](), [security](), [vpn]() ### AI overview A tutorial on configuring a Fortigate IPsec XAuth PSK VPN for Android 4.x phones and tablets to access an intranet. It covers CLI-based VPN setup, firewall rules, DNS access, and optional routing to external services, with notes about iOS compatibility. ### Source excerpt Do niedawna na moim telefonie VPN'ami były: PPTP lub L2TP - oba niespecjalnie mi się podobały. Ale od wersji 4-tej pojawiły się dwa nowe tryby: IPSec Xauth PSK i IPSec Xauth RSA. W pierwszym autoryzacja wykorzystuje login i hasło, w drugim certyfikaty. Tryb IPSec Xauth PSK jest bardzo wygodny bo łatwo można połączyć go z zewnętrznymi mechanizmami uwierzytelniającymi np. LDAP, Active Directory, itp. Pokażę jak skonfigurować swojego Fortigate'a by umożliwić połączenie z telefonów i tabletów na Androidzie 4.x do "Intranetu"1. Większość konfiguracji można przeprowadzić tylko w trybie CLI - zakładam że wiesz jak to zrobić. To co wygodniej można zrobić w trybie WWW to głównie tworzenie reguł dostępu na zaporze. ## Apache: mod\_authnz\_ldap z Active Directory DevFeed: [Apache: mod\_authnz\_ldap z Active Directory]() Original publisher: [Read original article]() Author: Tom Published: 2012-12-14T00:00:00Z Content type: tutorial Language: pl Sources: [Tomasz Gągor]() Topics: [active directory](), [Caching]() Tags: [active-directory](), [apache](), [cache](), [ldap](), [linux]() ### AI overview A Polish tutorial explains how to configure Apache authentication against Active Directory using LDAP and mod_authnz_ldap, including module activation, LDAP caching, virtual host settings, bind credentials, and access requirements. ### Source excerpt Gdy już się dorobi systemu Active Directory wygodnie jest wykorzystać jego bazę użytkowników do autoryzacji w różnych miejscach, np. do pewnych "tajnych i tajniejszych" stron w Apache. Najprościej można to zrobić z wykorzystaniem LDAP. Warto sprawdzić czy i jak możemy dostać się do kontrolerów. Gdy już mamy wszystkie potrzebne parametry konfigurujemy Apachego - na początek aktywujemy moduły: a2enmod ldap a2enmod authnz_ldap Teraz możemy edytujemy globalny plik konfiguracyjny mod_ldap'a by ustawić nieco cache'y (bardzo przydatne). Wartości można dostosować do potrzeb ale przykładowe powinny wystarczyć na początku: ## ldapsearch w Active Directory DevFeed: [ldapsearch w Active Directory]() Original publisher: [Read original article]() Author: Tom Published: 2012-12-05T00:00:00Z Content type: tutorial Language: pl Sources: [Tomasz Gągor]() Topics: [active directory](), [apt]() Tags: [active-directory](), [apt](), [bash](), [info](), [install](), [ip](), [ldap](), [port]() ### AI overview A Polish tutorial explains how to use ldapsearch from Linux to query and test access to Active Directory through LDAP. It covers installing ldap-utils, searching the directory, configuring search bases and credentials, applying filters, and extracting user logins or email addresses. ### Source excerpt Można lubieć AD, można go nie lubieć... Ale jak już się ma to warto czasem zintegrować go z tym... i tamtym... Od strony Linuksa najwygodniej można to osiągnąć przez LDAP. A żeby to dobrze zrobić trzeba najpierw przetestować czy aby wszystko działa jak byśmy sobie tego życzyli. I tutaj bardzo przydatne jest narzędzie ldapsearch. Do odpytywania LDAP'a potrzebujemy jeden pakiecik, który zawiera kilka narzędzi do jego obsługi: apt-get install ldap-utils Teraz możemy próbować przeszukiwać katalog np. tak: