Windows Server 2016: Understanding Microsoft’s Enhanced Security Administrative Environment

It is no secret that security is a major headache for organizations in today’s Internet-connected landscape but securing existing production Active Directory (AD) forests can be difficult for two reasons. In many cases, production forests may already be compromised. And the only way to be sure that hackers no longer have control is to rebuild the forest from scratch. This is a task that is costly and unrealistic in many cases. Secondly, it may not be possible to harden production forests enough to provide sufficient protection for highly privileged domain accounts. Doing so would break functionality in the domain.

Read more at – Windows Server 2016: Understanding Microsoft’s Enhanced Security Administrative Environment