The Active Directory Nobody Dares Touch

You didn't build this domain. Someone else did, a decade ago, and then left. Now it's yours - every GPO nobody remembers the reason for, every service account with domain admin rights and a password that's never been rotated, every trust relationship to a domain that might not even exist anymore. It hasn't fallen over, so everyone assumes it's fine. You know better, and you know a real audit would probably turn up something you'd rather find on your own terms than during an incident. The Active Directory Nobody Dares Touch is the practical, prioritized guide to auditing and hardening the AD forest you inherited - without breaking it. Inside, you'll learn: A structured health-check method for finding what's actually dangerous, not just what's old How to close real Kerberos and NTLM exposure without breaking legacy line-of-business apps overnight Auditing and safely reducing privileged group membership and service account sprawl Building a tiering model that actually gets adopted instead of abandoned after month one GPO cleanup that doesn't require archaeology into every administrator who ever touched the domain What to fix on-prem before you're safe to even start an Entra ID / hybrid migration Written for the sysadmin who has to keep this thing running, not the consultant who audits it and leaves.