We're having trouble keeping track of who owns our Active Directory service accounts, especially when employees leave the company. Many accounts become orphaned, and we can't easily determine…
I recently reviewed some old side projects and found more abandoned machine credentials than expected: CI personal access tokens, deploy tokens for hosts I no longer use, and…
Auth0's pricing is becoming too expensive for our needs, especially as usage grows. We're looking for alternatives that can handle service accounts, machine-to-machine authentication, and API access. What…
I recently reviewed some old side projects and found more machine credentials than expected: CI access tokens for projects I abandoned years ago, deploy tokens for hosts I…
Our machine identity setup has become difficult to manage across service accounts, certificates, and workload identities. We're looking for a practical way to centralize governance, discovery, rotation, and…
I work in cloud infrastructure and often see customers place their clusters behind cloud-provider security services, vulnerability scanners, and network firewalls. I recently heard someone say that most…
I'm trying to get a better grasp on the security advantages of using Group Managed Service Accounts (gMSAs) vs. regular domain user accounts. For example, I have a…
I'm trying to figure out how to hide admin and service accounts from view in Microsoft Teams. I've already set the 'msexchangehidefromaddresslist' option to true, but it doesn't…
Hey folks, I'm new to working with Active Directory and enterprise environments and I could really use some help. I've noticed that one of our SQL Server Services…
Kubernetes clusters typically have robust pre-deployment controls in place, but runtime threats still find a way to infiltrate, particularly through service accounts and dependencies. I'm curious to hear…
Hey folks! I'm a new sysadmin at a small business, and I could use some advice on handling service accounts as Microsoft enforces MFA starting October 1st. I've…
Hey everyone! I've mainly worked with GKE, Digital Ocean, and self-hosted Kubernetes clusters where they generate a kubeconfig file that gives admin access. I'm wondering how to manage…
I'm trying to figure out how to make it so that all members of a distribution list (DL) don't have their passwords expire. I know that using mggraph…