Audit and Security of Active Directory an Overview

Presented by Rodney Kocot, Systems Control and Security Incorporated on Tuesday, September 29th, 2009 from 11:30 - 1:30pm.

Coco's Restaurant and Bakery
60 West Foothill Boulevard, Upland, CA 91786

Abstract

Normally a full day session this presentation will cover an overview of audit and security of Windows and Active Directory. Time permitting related network and systems components will also be covered. The Active Directory structure and schema will be described. Users and groups, the group policy, active directory management, security, replication and backup are discussed. Audience interest and time permitting Active directory and Windows add-ins will be demonstrated and audit and security automation tools and scripting will be demonstrated. A partial outline for the session follows:

Introduction to Windows
Physical Security
Windows Security Overview
Patch Management
Virus Protection
Introduction to Active Directory
Active Directory Configuration
Active Directory Administration
Active Directory Policies
Active Directory Security
Group Policies
User and Group Administration
NTFS Permissions
Shared Folder Administration
Logging and Monitoring
Network Security
Ports and Services
Remote Access
Disaster Recovery
Audit Program
Tools Summary

Biography

Rodney Kocot is a technical IS Audit Consultant for Systems Control and Security Incorporated. Rodney provides technical audit training and consulting services for corporations worldwide. He has been an IT Auditor since 1981 with responsibilities that included technical audits of operating systems, networks, and audit software development. Positions at fortune 50 companies have included EDP Auditor, Senior EDP Auditor, AVP and EDP Auditor, VP and IT Auditor, VP and IT Audit Manager, SVP and Senior Audit Manager.

Rodney has often presented at the ISACA CACS and International conferences. He has presented numerous seminars and dinner meetings all over the world for the last 23 years. Seminars presented by Rodney include automation techniques, software, and audit programs. Topics include programming, audit and security automation, auditing minicomputers, and securing minicomputers. He has performed AS/400, LAN, Tandem Guardian, Unisys, Unix and OpenVMS audits using Visual Basic and Microsoft Access to automate the reviews. Rodney has been working with and programming PCs since 1982 beginning with CPM and BASIC. He currently programs mostly with Visual Basic, but also knows C++ and other languages. He has been working with Windows since its inception.

Presentation Materials

Presentation: Active Directory & Windows Audit and Security (pdf)
Sys-Secure Request List for Windows
EnumServersServices.vbs
Run with cscript to get a list of all services running on all servers. This script can also be modified to change the local administrator password on all the systems in a domain.
SingleSystemRequestList20090223.zip
The ZIP file includes the minimum listings to obtain for a review of the security of a windows server.

Luncheon Prices

$15 — Members
$15 — Students
$20 — Non-Members

Information Systems Security Association, Inland Empire Chapter