ActiveDirSec.Org

The world's most trusted forum on Active Directory Security


Post Info TOPIC: Identity Management and Active Directory


Newbie

Status: Offline
Posts: 3
Date: Dec 14, 2010
Identity Management and Active Directory
 
 


Hi,

I have a simple but yet abstract question regarding identity management as it relates to Active Directory and Windows Server, especially since there has been such a buzz about identity management over the last few years.

I would like to know what constitues an identity in a Windows network?

Thanks,
Bob



__________________
Go Proteas... we are the champions!


Member

Status: Offline
Posts: 5
Date: Jun 15, 2011
 
 

Bob,

Shalom. I think it can be safely said that on the Microsoft Windows Server platform, a user's domain user account constitutes a user's identity.

One can make this claim based on the fact that it the user's domain account that is used to uniquely identify the user, and that is used by the user to log-on to the system and engage in a variety of computing tasks, such as communicating (sending and receiving mail), accessing network resources, and creating and sharing IT resources.

It is also the domain user account that is captured in auditing logs when a user performs an action for which auditing is enabled.

Lehitra'ot.

- Ishmael.



__________________

There isn't a system that cannot be broken into.



Member

Status: Offline
Posts: 6
Date: Jul 15, 2011
 
 

Hi Rossi,

You bring up a very good point. If a domain user account is the user's corporate identity in organizations, then what is the easiest way in which a hacker or an insider could engage in corporate identity theft?

I ask only because the number of security incidents only continues to rise, and the risk of the compromise of corporate identities to me is a really serious risk to think about.

Johnny



__________________

My Blog - Active Directory Privilege Escalation Security Risks

Page 1 of 1  sorted by
Quick Reply

Please log in to post quick replies.

Post to Facebook Post to Digg Post to Del.icio.us
Members Login
Username 
 
Password 
    Remember Me