Microsoft Security Architect: Active Directory Is 10x Harder to Defend Than Entra

At Black Hat USA 2026, Microsoft’s David Weston put three numbers on a slide that anyone still running domain controllers should sit with. The Microsoft…

A short excerpt. Read the linked source for the full article and context.

Monitored guidance in the same product area; this does not establish that the article cites each page.

• NTLMv1 hardening guidance
• SMB signing hardening guidance
• AD LDAP signing and channel binding
• AD LDAP signing enforcement policies
• AD LDAP session security requirements