Active Directory Certificate Services guides. Architecture, templates, autoenrollment, NDES, and security hardening.
Active Directory Certificate Services explained. When to use private CA vs public CA for enterprise PKI.
Two-tier PKI hierarchy with offline Root CA and online Issuing CA. Enterprise vs Standalone CA explained.
ADCS templates for User, Computer, Web Server certificates. Permissions, versioning, and common mistakes.
Configure GPO-based certificate autoenrollment. Troubleshooting flowchart and testing commands.
Network Device Enrollment Service for Cisco, Intune, and devices that cannot join Active Directory.
ESC1-ESC8 privilege escalation attacks from SpecterOps research. Detection and hardening checklist.
Master ADCS template permissions. Enroll vs Autoenroll, inheritance, effective permissions, and common misconfigurations.
Get ADCS naming right the first time. CA hierarchy names, certificate template naming, subject fields, CRL/AIA URLs, and AD object names.
