Securing directory services
The most common directory service deployed on most organizations’ on-premises data centers is the Microsoft Active Directory. This service allows you to centrally manage your user and computer identities, join Windows and Linux machines to the Active Directory domain, set password policies (such as the password length, password complexity, and more), and control access to traditional resources (such as Windows file shares, SQL servers, IIS servers, and more).
The most used protocol when working on-premises on traditional Windows applications or services is the Kerberos protocol.
For more information, please refer to the following resources:
- Active Directory Domain Services Overview:
- Kerberos Authentication Overview:
