Mejoras de seguridad para el Directorio Activo

Kit de GPO para asegurar servidores y estaciones de trabajo (SCT)

• https://learn.microsoft.com/en-us/windows/security/operating-system-security/device-management/windows-security-configuration-framework/security-compliance-toolkit-10

Guía para deshabilitar servicios en servidores Windows

• https://learn.microsoft.com/en-us/windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server

Active Directory Hardening Series – Part 1 – Disabling NTLMv1

• https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/active-directory-hardening-series-part-1-disabling-ntlmv1/ba-p/3934787

Active Directory Hardening Series – Part 2 – Removing SMBv1

• https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/active-directory-hardening-series-part-2-removing-smbv1/ba-p/3988317

Como configurar Kerberos sin FQDN usando la dirección ip del host

• https://learn.microsoft.com/en-us/windows-server/security/kerberos/configuring-kerberos-over-ip

Mejores Practicas para asegurar Active Directory.

• https://learn.microsoft.com/en-gb/windows-server/identity/ad-ds/plan/security-best-practices/best-practices-for-securing-active-directory