Active Directory Members Only

Active Directory Tiering & Hardening

AD tiering is the architectural approach that breaks the lateral movement chain by preventing credentials from crossing privilege boundaries. Tier 0 admins never log into Tier 1 servers. Tier 1 admins never log onto Tier 2 workstations. Combined with PAWs, Credential Guard, Protected Users, and Authentication Policies, this is what a hardened AD environment looks like.

Related Articles