Derek Melber

Practice Lead – Microsoft Identity, Guide


Derek Melber, Strategic Advisor for Enterprise Identity, has been helping enterprises for over 25 years with identity security, Active Directory/Azure Active Directory, cloud identity, Entra ID, Microsoft 365, Intune, Microsoft Defender, CTEM, PAM, MFA, Group Policy, and other integrated technologies.  His professional experience includes Active Directory and Entra ID security assessments, specializing in network, wireless, and application penetration testing.  Often asked to speak at events around the world, Derek has spoken and given Keynotes in over 40 countries at events such as RSA, Gartner, Blackhat, and more. Derek has worked for and with companies leading in these areas such as Microsoft, AWS, BeyondTrust, Quest, ManageEngine, SpectreOps, Tenable, and more. You can follow Derek on LinkedIn at @derekmelber and contact him at derek.melber@guidepointsecurity.com.

Derek has been awarded 21 Microsoft MVP awards in Active Directory, Group Policy and Security over the past 22 years, where he has contributed to these communities around the world.

tech talk

(in Englisch)

Summary

Active Directory Security – Real-World Scenarios and Solutions

  • AD security is not easy, we will dive into some of the most misconfigured security settings I see from the field.
  • Uncovering AD security settings can be difficult, we will dive into tooling and scripts that can help you find the correct AD security settings.
  • AD does not live in a vacuum, there are other solutions that can help secure the infrastructure, these are real world solutions from the field.

Active Directory is not new, but it is usually not secure either. After years of auditing, assessing, and consulting around AD problems and solutions, I have found that there are some common security issues that can be resolved quickly! However, there are other solutions that are not so obvious, which we will try to uncover in this session. For this session, let 21-time Microsoft MVP Derek Melber guide you through his world of helping organizations secure and solve issues around Active Directory security.