Intermediate Resources

Note: Some of these sections are light as we're still building the list.

AD Intermediate Resources

#book AD: Designing, Deploying, and Running AD 5th Edition
- This book is the corner stone of AD resources still. It covers topics that go further than beginners need.
- This book is also mildly out of date but most of the content is still relevant to modern AD.
- https://www.amazon.com/Active-Directory-Designing-Deploying-Running-ebook-dp-B00CBM1WES/dp/B00CBM1WES
#article #free AD DS Simplified Administration
- https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/ad-ds-simplified-administration
#training #free Understand how Active Directory Domain Services uses DNS
- https://learn.microsoft.com/en-us/training/modules/understand-active-directory-domain-name-system/
#article #free Active Directory Domain Services Overview
- Read all the sections EXCEPT the “Active Directory Schema Technical Reference”. It is a good article but more detail than is needed.
- https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/virtual-dc/active-directory-domain-services-overview
#article #free Active Directory Hardening Series
- https://techcommunity.microsoft.com/tag/adhardening?nodeid=board%3acoreinfrastructureandsecurityblog
#article #free #3rdParty Kerberos Explained in a Little Too Much Detail
- https://syfuhs.net/a-bit-about-kerberos
#training #free Manage Advanced Features of AD DS
- https://learn.microsoft.com/en-us/training/modules/manage-advanced-features-of-ad-ds/
#article #free Operations Masters Roles
- https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-2000-server/cc961939(v=technet.10)
#article #free Protected Accounts and Groups in Active Directory
- https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/appendix-c--protected-accounts-and-groups-in-active-directory
#article #free Core Concepts of Active Directory Domain Services
- https://learn.microsoft.com/en-us/windows/win32/ad/core-concepts-of-active-directory-domain-services
#article #free Enterprise Access Model
- https://learn.microsoft.com/en-us/security/privileged-access-workstations/privileged-access-access-model
#training #free Troubleshoot Active Directory
- https://learn.microsoft.com/en-us/training/modules/troubleshoot-active-directory/
#training #free Troubleshoot Active Directory Domain Services replication
- https://learn.microsoft.com/en-us/training/modules/troubleshoot-active-directory-replication/
#training #free Advanced Group Policy Troubleshooting
- https://learn.microsoft.com/en-us/training/modules/advanced-group-policy-troubleshooting/
#article #free Securing Domain Controllers Against Attack
- https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/securing-domain-controllers-against-attack
#article #free Securing Privileged Access
- https://learn.microsoft.com/en-us/security/privileged-access-workstations/overview?source=recommendations
#tool #free Microsoft Security Baselines
- https://learn.microsoft.com/en-us/windows/security/operating-system-security/device-management/windows-security-configuration-framework/windows-security-baselines
#tool #free DISA STIGs
- https://public.cyber.mil/stigs/downloads/
- https://cyber.trackr.live/stig
#tool #free #3rdParty Semperis PurpleKnight
- https://semperis.com/downloads/tools/pk/PurpleKnight-Community.zip
#tool #free #3rdParty PingCastle (Netwrix)
- https://www.pingcastle.com/download/
#article #free #3rdParty Understanding Windows Authentication
- https://syfuhs.net/understanding-windows-auth
#training #free Perform Windows Server Secure Administration
- https://learn.microsoft.com/en-us/training/modules/perform-windows-server-secure-administration/
#training #free Secure Windows Server user accounts
- https://learn.microsoft.com/en-us/training/modules/secure-windows-server-user-accounts/
#article #free Protecting Tier 0 the Modern Way
- https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/protecting-tier-0-the-modern-way/4052851
#training #free Advanced Active Directory Backup and Recovery
- https://learn.microsoft.com/en-us/training/modules/active-directory-backup-recovery/
#tool ForestDruid
- https://semperis.com/downloads/tools/fd/ForestDruid-Community.zip
#article #tool #free Active Directory Tier Model Documentation
- https://microsoft.github.io/ActiveDirectoryTierModel/

PKI Intermediate

NOTE: This section is still under development

#article #free Secure Configuration and Hardening of Active Directory Certificate Services
- https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/secure-configuration-and-hardening-of-active-directory-certificate-services/4463240
#article #3rdParty #free The Reality Behind PKI Revocation Checking
- https://michaelwaterman.nl/2026/05/25/the-reality-behind-pki-revocation-checking/
#article #free Implementing and Managing an ADCS Offline Root Certificate Authority
- https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/implementing-and-managing-an-adcs-offline-root-certificate-authority-practical-p/4468175
#article #free CRL & AIA Publishing Guide
- https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/crl--aia-publishing-guidance-practical-pki-part-2/4485713
#article #3rdParty #free AD CS Performance Toolkit
- https://michaelwaterman.nl/2026/06/15/ad-cs-performance-toolkit/
#article #3rdParty #free Proxmox Meets Enterprise PKI
- https://michaelwaterman.nl/2026/02/18/proxmox-meets-enterprise-pki/

Entra Intermediate

NOTE: This section is still under development

#article #free #3rdParty Securing Entra ID Administration - Tier 0
- https://trustedsec.com/blog/securing-entra-id-administration-tier-0

Advanced

NOTE: The resources here are mixed together. The topic is tagged along with the usual tags.

Before listing the advanced resources, it is important to note that this section could be thousands of resources. The number one advice again is to practice and lab where you can. After that, we recommend reviewing the collection of resource links and the MCM-Links on the subreddit wiki.

Advanced Resources List

#training #free Understand the Active Directory Domain Services Database and SYSVOL
- https://learn.microsoft.com/en-us/training/modules/understand-active-directory-database/
#training #free Understand the Active Directory Domain Services Schema
- https://learn.microsoft.com/en-us/training/modules/understand-active-directory-schema/
#article #free On-prem Conditional Access You Never Knew You Had
- https://michaelwaterman.nl/2026/04/17/on-prem-conditional-access-you-never-knew-you-had/
#book #free #3rd AdminSDHolder Misconceptions and Misconfigurations
- https://specterops.io/resources/adminsdholder/
#article #free Deep Dive - AD LDAPS Certificate Selection
- https://michaelwaterman.nl/2026/02/03/deep-dive-active-directory-ldaps-certificate-selection/
#tool Bloodhound / Sharphound
- https://specterops.io/open-source-tools/bloodhound-community-edition/
#article #free Enhanced Security Admin Environment
- https://learn.microsoft.com/en-us/security/privileged-access-workstations/esae-retirement?source=recommendations
#article #free #PKI Certified Pre-Owned
- https://specterops.io/blog/2021/06/17/certified-pre-owned/