Skip to content

Protected Users Security Group

August 3, 2014

I’ve just read about this new Security Group that comes as part of Windows Server 2012 R2 active directory domain.

The idea is that any accounts put into this group are made even more secure and this group provides

  • Authenticate with NTLM authentication.
  • Use DES or RC4 encryption types in Kerberos pre-authentication.
  • Be delegated with unconstrained or constrained delegation.
  • Renew the Kerberos TGTs beyond the initial four-hour lifetime.

You can read more about this group and its other security benefits on the technet article linked below:

http://technet.microsoft.com/en-us/library/dn466518.aspx

Mark

Advertisements
Leave a Comment

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: