Domain Controller Firewall Best Practice
I am searching for the best practice of securely deploying windows domain controller and exchange in a small medium size network 50 users 20 virtual servers.
Domain controller firewall best practice. How would you deploy them. Sécurisation des contrôleurs de domaine contre les attaques securing domain controllers against attack. 10 minutes de lecture.
There are a number of best practice checks performed when run that identify potential issues. Most subnets can talk over some ports to a management lan but most subnets are isolated from each other. Been googling this for a little while and can t seem to find a definitive answer.
Udp port 88 for kerberos authentication udp and tcp port 135 for domain controllers to domain controller and client to domain controller operations. Avoid direct login to domain controllers for day to day work. Use remote server administration tools rsat for ad and dns management.
Restrict membership of critical groups like administrators schema admins enterprise admins domain admins. Windows server 2016 windows server 2012 r2 windows server 2012 applies to. With the myths out of the way you re clear to design your domain controller deployment.
If your domain controllers need to replicate across sites you should implement secure connections between the sites. I ve got a network with multiple routed ip subnets some with firewalls between them. Get answers from your peers along with millions of it pros who visit spiceworks.
Create a new gpo for domain controller security and link to the domain controllers ou. Si une personne malintentionnée dispose d un accès physique. This is the most comprehensive list of dns best practices and tips on the planet.