Why Active Directory Weaknesses Stay Open for Years in Teams With One or Two Admins
Help Net Security, Friday, October 16th, 2026
How 27 municipalities hardened Windows Server and Active Directory together in a 12-week cohort program.
David Fuhr, CTO at intcube, describes a security cohort in which 27 municipal IT organizations hardened Windows Server and Active Directory over 12 weeks with weekly sessions, homework and before-and-after measurements.
He says the problem was not awareness, since small teams already knew they needed work, but capacity and a structured way to start.
The interview covers handling risky settings such as SMB signing, LDAP signing and Kerberos hardening, along with lab testing and rollback planning.
Fuhr also discusses who owns settings afterward and the technical, organizational and process debt in older AD environments.