Active Directory Domain Services

Microsoft, Active Directory & domain controllers

On-premises directory running on Windows Server domain controllers: users, computers, Group Policy and Kerberos authentication.

  • Domain controllers with multi-master replication
  • FSMO roles and AD-integrated DNS
  • Group Policy for users and computers
  • Sites and services for multi-site replication
  • Kerberos and NTLM authentication
  • Sync to Entra ID with Entra Connect or Cloud Sync

Best for: File servers, line-of-business apps and environments that still need on-premises identity.

Microsoft Defender for Identity

Microsoft, Active Directory & domain controllers

Sensors on domain controllers that detect attacks against on-premises Active Directory.

  • Detects reconnaissance, credential theft and lateral movement
  • Identity security posture recommendations
  • Sensors for DCs, AD FS and AD CS
  • Alerts correlated in Defender XDR

Best for: Spotting password spray, Kerberoasting and other AD attacks.

Product names and logos are trademarks of their respective owners and are used here for identification only. ITwithTariq isn’t affiliated with or endorsed by these vendors.