How to configure the Enhanced Security Admin Environment (ESAE) architecture (often referred to as red forest, admin forest, or hardened forest)

Question

Hi,

I want to know how to implement the Enhanced Security Admin Environment (ESAE) architecture (often referred to as red forest, admin forest, or hardened forest). I have found the below Ms article for this. As mentioned it is on retired state, but still we have requirement to implement it in on-prem from our client side.

https://learn.microsoft.com/en-us/security/privileged-access-workstations/esae-retirement

But unfortunately, I have not found any article or blog for the configuration and implementation of this red forest aritecture. I am totally new on it, but I haven't idea how configure and test this architecture.

Are there any kind of GPO need to configure and implement in this red forest model?

Can you please help me as soon as possible for the configuration and implementation of red forest model.

I am really grateful to you for this.

Thanks!

Khushi

Answer 1

Hi, @Khushi •

Sorry for the delay.

Regarding the red forest I think the link below will help you to get more details about the best pracitise :

Planning a bastion environment

Are there any kind of GPO need to configure and implement in this red forest model?

You will need GPO to implement tiering model based on user right assignement settings and to enable audit.

---

Please don't forget to accept helpful answer and close this thread