How to secure Domain Admins and Enterprise Admins security groups

Learn how to secure the Domains Admins and Enterprise Admins security groups in Active Directory and stop members of those groups logging into member servers and workstations. In this example, I show you how to use group policy to set the 'Deny access to this computer from the network', 'Deny log on as a batch job', 'Deny log on as a service', 'Deny log on locally', and 'Deny log on through Remote Desktop Services' options which will stop members of the Domain Admins and Enterprise Admins security groups from logging into member servers and workstations as well as running services and applications on those devices.

Securing Enterprise Admins on Microsoft Docs: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/appendix-e--securing-enterprise-admins-groups-in-active-directory

Securing Domain Admins on Microsoft Docs: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/appendix-f--securing-domain-admins-groups-in-active-directory

Managing Local Administrator Accounts: https://youtu.be/DdAEZdsIfSs

Delegate Active Directory Permissions: https://youtu.be/sT1qA7wRqEE

Hi, I’m Danny, a London based IT consultant and sporadic blogger. You can view all my blog posts at: https://www.dannymoran.com

Видео How to secure Domain Admins and Enterprise Admins security groups канала Danny Moran