Active Directory Security Tip #13: Kerberos Delegation

Review the membership of groups for accounts and groups from another Active Directory forest (technically another domain, but using forest here). These are called “Foreign Security Principals” (FSPs) like the ones highlighted in the image. These FSPs are accounts that exist in another forest but have rights in the AD forest. Any FSPs should be … Continue readingActive Directory & Azure AD/Entra ID SecurityRead More