How must company user computer be that is in active directory

Question

I am searching about how the end user computer must be, but I can't find most related answers. I need the answer. For example I am working in a company, and I have the computer that is given company that is in domain. What will be in this computer that we can say it is secured enough. That is the best secured computer in company. Which procedures should be? Thanks in advance.

Answer 1

Hi,

You can start by reading the links below talking about desktop hardening :

security-best-practices-hardening-windows-10
windows-10-hardening-19-ways-to-secure-your-workstations
guidance-hardening-microsoft-windows-10-enterprise-itsp70012

Please don't forget to mark helpful reply as answer

Answer 2

Hello there,

It depends upon the security policies fixed by your domain.

After a machine joind to domain, there will be multiple registry changes.

For an example, if there are some domain-wide computer Group Policies are defined, the newly joined machine will apply these policies and corresponding registry key values will be changed.

At a high level, when you join a computer in AD, a computer account is created in the AD database that is used to authenticate the computer to the domain controller every time it boots up. Passwords for computer accounts are renewed automatically every 30 days by default. Authentication is done by Kerberos which uses port 88 TCP (and UDP older versions). Auditing and controlling access to resources can also be done by using computer accounts in AD.

Similar discussion here https://social.technet.microsoft.com/Forums/ie/en-US/fb41d144-656f-4775-b64c-9354f6e7ccdb/what-happens-when-a-computer-joins-an-active-directory-domain?forum=winserverDS

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer--