We are in the midst of planning an internal security assessment of our Active Directory deployment and we have been discussing a variety of potential security risks that we should be ideally be ready to react to, should they ever materialize.

As a part of our internal discussions, one of the things we have been trying to do is prioritize the risks to our Active Directory deployment. Naturally, we came up with over a dozen scenarios/settings/configurations/incidents that could be nasty, but we have not yet been able to figure out what might be the most damaging security risk to our Active Directory?

I was hoping to get some insight from others on this forum, and would invite any input from others. This is naturally very important to the security of our entire Windows Server network, so this is very important for us to get a grip on, plan for, manage and assess.

All inputs appreciated.

Thanks,

-R