Most people spend the short days and long nights of December with loved ones. At Microsoft, December is a vacation month for a lot of employees as the end of December marks the first half of the fiscal year and targets have mostly been met. For the Active Directory team, however, December marked the fourth Active Directory-related Security ...

It’s not very uncommon for Microsoft to issue a patch for a problem in Active Directory technologies (including Active Directory Domain Services, Lightweight Directory Services, Certificate Services, Rights Management Services, Federation Services and Group Policy). In this blog post, let’s look at some statistics:    Domain ...

On Tuesday November 13, 2011 Microsoft, in its monthly Patch Tuesday, released a Security Bulleting addressing an issue with Active Directory. To exploit this vulnerability, an attacker would first need to acquire credentials to log on to an Active Directory domain. An attacker could then run a specially crafted application that could exploit the ...

On Tuesday November 8, 2011 Microsoft released a Security Bulletin addressing an issue with Active Directory. The problem is the LDAP over SSL (aka LDAPS) implementation in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) does not examine Certificate Revocation Lists (CRLs). ...