@eranseder Das ist Stand jetzt einfach nicht möglich.
Mit ambitionierten Plänen könnte man in circa 10 Jahren da sein.
Will man dieses Invest eingehen und damit auch die Globalisierung wegen einem Clown aufgeben?
Anders sieht es bei kritischen Systemen aus...
@awakecoding Thank you for pushing me to my own problems 😅 To be honest, there are actually so much topics that the KDC Proxy is not on my priority list very high. I will definetly get back as soon I find some time.
@techspence I'm not a security expert but in every environment I see, I run Maester and PingCastle.
It's easily executed and shows the customer what to do, to get some Baseline Config.
Which of the mentioned tools is also "easy to execute"? This is important for SMBs
@awakecoding Update the device password on a regular base.
For this, I installed the KDC Proxy.
I checked from outside the network and got with klist get krbtgt a ticket but when checking logs on my proxy, there is nothing. That's what confuses me and I think I am missing some point.
@awakecoding Hey,
thanks for your effort and sorry for my late answer. But in my case I don't use it with RDP (may out of your scope than :-)).
I want to harden my local client network, so already all the clients access resources through GSA. But I still have hybrid devices which needs to...
@politicalbeauty Ich kann mit der AfD nichts anfangen aber auch hier gilt:
Die Familie ist Tabu! Das gilt auch für Leute die eine homosexuelle Beziehung gar nicht als Familie sehen.
@merill@MattChatt42 No, the opposite. I want to get rid of password/MFA.
Because I can't forward my FIDO everywhere, the Device Code Login is a cool solution (for Admins). But there are still plenty of logins where I can't use it. F.e. Entra Connect Sync, Adds Health, Universal Print Connector
@MattChatt42@merill Not just this... There are so much Microsoft Services where you can't even go with Device Code Login but you still need Username & Password. I would be happy to use my FIDO and DCL as an admin and block DCL for users.
@EricaZelic I read your post like, who isn't working 15hours a day can't be good. I'm sorry if I misunderstood this.
I am also working more than "regular" but just because I like what I'm doing. That's why I don't expect this from other.
@in_allem @RFDNW @DAZN_DE Ja, da ist kein Druck auf das Bein. Aber ein Stollentreffer auf der Höhe ist trotzdem mehr wie nur ein taktischer Treffer.
Da ist Rot durchaus möglich aber halt auch nicht sooo wild wie manche es hier darstellen.