How must company user computer be that is in active directory

Kanan Ismayilov 1 Reputation point
2023-01-05T05:53:57.94+00:00

I am searching about how the end user computer must be, but I can't find most related answers. I need the answer. For example I am working in a company, and I have the computer that is given company that is in domain. What will be in this computer that we can say it is secured enough. That is the best secured computer in company. Which procedures should be? Thanks in advance.

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
3,662 questions
No comments
{count} votes

2 answers

Sort by: Most helpful
  1. BOURBITA Thameur 12,396 Reputation points MVP
    2023-01-05T10:00:57.56+00:00

    Hi,

    You can start by reading the links below talking about desktop hardening :

    security-best-practices-hardening-windows-10
    windows-10-hardening-19-ways-to-secure-your-workstations
    guidance-hardening-microsoft-windows-10-enterprise-itsp70012

    Please don't forget to mark helpful reply as answer

    No comments

  2. Limitless Technology 10,021 Reputation points
    2023-01-05T15:26:27.59+00:00

    Hello there,

    It depends upon the security policies fixed by your domain.

    After a machine joind to domain, there will be multiple registry changes.

    For an example, if there are some domain-wide computer Group Policies are defined, the newly joined machine will apply these policies and corresponding registry key values will be changed.

    At a high level, when you join a computer in AD, a computer account is created in the AD database that is used to authenticate the computer to the domain controller every time it boots up. Passwords for computer accounts are renewed automatically every 30 days by default. Authentication is done by Kerberos which uses port 88 TCP (and UDP older versions). Auditing and controlling access to resources can also be done by using computer accounts in AD.

    Similar discussion here https://social.technet.microsoft.com/Forums/ie/en-US/fb41d144-656f-4775-b64c-9354f6e7ccdb/what-happens-when-a-computer-joins-an-active-directory-domain?forum=winserverDS

    Hope this resolves your Query !!

    --If the reply is helpful, please Upvote and Accept it as an answer--

    No comments