3 ms·
The Microsoft Windows ecosystem has always had a laughable security posture. Many large organisations design the IT where the Domain Controller and AD is at the
by unixhero 5y ago
The Microsoft Windows ecosystem has always had a laughable security posture. Many large organisations design the IT where the Domain Controller and AD is at the heart and center of everything. One ring to rule them all. I find this ridiculous. Welp, all these crises and vulberabilities have surely helped to keep the lights on for my cybersecurity consultancy.
- NovemberWhiskey 5y agoIt's pretty unclear what the alternative to using AD is supposed to be if you need to run a Microsoft application stack.
- hackmiester 5y agoHell, there’s barely an alternative if all you need is a manageable directory of your users and PCs.
- unixhero 5y agoFAANG and Tesla knows
- NovemberWhiskey 5y agoOK, but you don't? Or you do, but there's some reason you're being cryptic about it?
- zinekeller 5y agoI'll say: Microsoft's solution, for all it's warts and problems, is (currently) the best integrated solution for organisational use. Jamf (for use in macOS/iOS) and a plethora of options for Android (like BlackBerry's ESP and Samsung's Knox), while decent, doesn't have that integrated feel like Microsoft's. RedHat's and SuSE's options are good on Linux, but it still feels clunky, even considering the clunkiness of Microsoft's tools. The best contender is ironically Google and Chromebooks, but I feel that they still need to improve their solution though.
- jabroni_salad 5y agoHow nice for them. If you can recommend a core banking ops solution and a loan origination software for banks under $1B in assets that doesn't require Windows I will gladly go around to all my clients and sell it. Something comparable to what Jack Henry, Fiserv, and Finastra are hawking. Small businesses can get away with doing everything on websites and a gmail account. Large businesses can 'just' make their own stuff. Middle market businesses that aren't selling software are all trapped on Windows by the software they can buy.
- jodrellblank 5y agoThe same Netflix that advertises for "Senior Active Directory Engineer" job? https://lensa.com/senior-active-directory-engineer-jobs/angels/jd/b78f7c557eecfdbab003f87c14a9551f https://lensa.com/senior-active-directory-engineer-jobs/ange... I've heard anecdotal claims that Amazon has a large internal AD.
- FourthProtocol 5y agoIf you're running a single forest with/or a single AD/domain I'd argue that Microsoft has done nothing wrong. Separation of concerns has been a thing for decades now. And no, I'm not suggesting Microsoft's stuff is above reproach.