The domain controller is the most critical system in your IT environment.
A successful attack on Active Directory usually means complete control over all systems.

The Blackfort Domain Controller Security Baseline was specifically developed to reduce key vulnerabilities in Active Directory and to sustainably increase the security of authentication and directory services.

The included Group Policy implements proven hardening measures and focuses on secure authentication, protocol hardening, and the reduction of privileged attack surfaces.

Ideal for:

• Companies with Active Directory infrastructure

• safety-critical environments

• MSPs with increased compliance requirements

• Importable Domain Controller GPO (backup)

• Specialized AD Hardening Baseline

• PowerShell Import Script

• Quick Start Guide (README)

• Kerberos hardening

• NTLM restrictions and security

• LDAP Signing & Channel Binding

• Securing authentication processes

• Limiting insecure legacy protocols

• Extended audit and security logging configuration

• Protection against typical AD attack techniques

• Active Directory Domain

• Domain Controller on Windows Server 2019 or 2022

• Administrative permissions for GPO import

• Increased intervention intensity – can, among other things, affect existing authentication processes.

• Use is recommended only after testing in an isolated environment.

• No individual customization included

• Compatibility with legacy systems must be verified by the customer.

Combine this baseline with our server and logging baselines for complete transparency and control.