I have a simple but yet abstract question regarding identity management as it relates to Active Directory and Windows Server, especially since there has been such a buzz about identity management over the last few years.
I would like to know what constitues an identity in a Windows network?
Shalom. I think it can be safely said that on the Microsoft Windows Server platform, a user's domain user account constitutes a user's identity.
One can make this claim based on the fact that it the user's domain account that is used to uniquely identify the user, and that is used by the user to log-on to the system and engage in a variety of computing tasks, such as communicating (sending and receiving mail), accessing network resources, and creating and sharing IT resources.
It is also the domain user account that is captured in auditing logs when a user performs an action for which auditing is enabled.
You bring up a very good point. If a domain user account is the user's corporate identity in organizations, then what is the easiest way in which a hacker or an insider could engage in corporate identity theft?
I ask only because the number of security incidents only continues to rise, and the risk of the compromise of corporate identities to me is a really serious risk to think about.