Protecting Active Directory from Malicious and Accidental Destruction: When Recycle Bin Isn’t Enough

4/18/2017 11:00:00 AM [(UTC-05:00) Eastern Time (US & Canada)] - Can't make the live event? Register anyway to receive a link to the recording.

Other Time Zones

GMT Standard Time-(UTC+00:00) Dublin, Edinburgh, Lisbon, London    4/18/2017 4:00:00 PM
Show/Hide All Time Zones

All Time Zones

Dateline Standard Time-(UTC-12:00) International Date Line West 4/18/2017 3:00:00 AM
UTC-11-(UTC-11:00) Coordinated Universal Time-11 4/18/2017 4:00:00 AM
Aleutian Standard Time-(UTC-10:00) Aleutian Islands 4/18/2017 6:00:00 AM
Hawaiian Standard Time-(UTC-10:00) Hawaii 4/18/2017 5:00:00 AM
Marquesas Standard Time-(UTC-09:30) Marquesas Islands 4/18/2017 5:30:00 AM
Alaskan Standard Time-(UTC-09:00) Alaska 4/18/2017 7:00:00 AM
UTC-09-(UTC-09:00) Coordinated Universal Time-09 4/18/2017 6:00:00 AM
Pacific Standard Time (Mexico)-(UTC-08:00) Baja California 4/18/2017 8:00:00 AM
UTC-08-(UTC-08:00) Coordinated Universal Time-08 4/18/2017 7:00:00 AM
Pacific Standard Time-(UTC-08:00) Pacific Time (US & Canada) 4/18/2017 8:00:00 AM
US Mountain Standard Time-(UTC-07:00) Arizona 4/18/2017 8:00:00 AM
Mountain Standard Time (Mexico)-(UTC-07:00) Chihuahua, La Paz, Mazatlan 4/18/2017 9:00:00 AM
Mountain Standard Time-(UTC-07:00) Mountain Time (US & Canada) 4/18/2017 9:00:00 AM
Central America Standard Time-(UTC-06:00) Central America 4/18/2017 9:00:00 AM
Central Standard Time-(UTC-06:00) Central Time (US & Canada) 4/18/2017 10:00:00 AM
Easter Island Standard Time-(UTC-06:00) Easter Island 4/18/2017 10:00:00 AM
Central Standard Time (Mexico)-(UTC-06:00) Guadalajara, Mexico City, Monterrey 4/18/2017 10:00:00 AM
Canada Central Standard Time-(UTC-06:00) Saskatchewan 4/18/2017 9:00:00 AM
SA Pacific Standard Time-(UTC-05:00) Bogota, Lima, Quito, Rio Branco 4/18/2017 10:00:00 AM
Eastern Standard Time (Mexico)-(UTC-05:00) Chetumal 4/18/2017 10:00:00 AM
Eastern Standard Time-(UTC-05:00) Eastern Time (US & Canada) 4/18/2017 11:00:00 AM
Haiti Standard Time-(UTC-05:00) Haiti 4/18/2017 10:00:00 AM
Cuba Standard Time-(UTC-05:00) Havana 4/18/2017 11:00:00 AM
US Eastern Standard Time-(UTC-05:00) Indiana (East) 4/18/2017 11:00:00 AM
Paraguay Standard Time-(UTC-04:00) Asuncion 4/18/2017 11:00:00 AM
Atlantic Standard Time-(UTC-04:00) Atlantic Time (Canada) 4/18/2017 12:00:00 PM
Venezuela Standard Time-(UTC-04:00) Caracas 4/18/2017 11:00:00 AM
Central Brazilian Standard Time-(UTC-04:00) Cuiaba 4/18/2017 11:00:00 AM
SA Western Standard Time-(UTC-04:00) Georgetown, La Paz, Manaus, San Juan 4/18/2017 11:00:00 AM
Pacific SA Standard Time-(UTC-04:00) Santiago 4/18/2017 12:00:00 PM
Turks And Caicos Standard Time-(UTC-04:00) Turks and Caicos 4/18/2017 11:00:00 AM
Newfoundland Standard Time-(UTC-03:30) Newfoundland 4/18/2017 12:30:00 PM
Tocantins Standard Time-(UTC-03:00) Araguaina 4/18/2017 12:00:00 PM
E. South America Standard Time-(UTC-03:00) Brasilia 4/18/2017 12:00:00 PM
SA Eastern Standard Time-(UTC-03:00) Cayenne, Fortaleza 4/18/2017 12:00:00 PM
Argentina Standard Time-(UTC-03:00) City of Buenos Aires 4/18/2017 12:00:00 PM
Greenland Standard Time-(UTC-03:00) Greenland 4/18/2017 1:00:00 PM
Montevideo Standard Time-(UTC-03:00) Montevideo 4/18/2017 12:00:00 PM
Saint Pierre Standard Time-(UTC-03:00) Saint Pierre and Miquelon 4/18/2017 1:00:00 PM
Bahia Standard Time-(UTC-03:00) Salvador 4/18/2017 12:00:00 PM
UTC-02-(UTC-02:00) Coordinated Universal Time-02 4/18/2017 1:00:00 PM
Mid-Atlantic Standard Time-(UTC-02:00) Mid-Atlantic - Old 4/18/2017 2:00:00 PM
Azores Standard Time-(UTC-01:00) Azores 4/18/2017 3:00:00 PM
Cape Verde Standard Time-(UTC-01:00) Cabo Verde Is. 4/18/2017 2:00:00 PM
UTC-(UTC) Coordinated Universal Time 4/18/2017 3:00:00 PM
Morocco Standard Time-(UTC+00:00) Casablanca 4/18/2017 4:00:00 PM
GMT Standard Time-(UTC+00:00) Dublin, Edinburgh, Lisbon, London 4/18/2017 4:00:00 PM
Greenwich Standard Time-(UTC+00:00) Monrovia, Reykjavik 4/18/2017 3:00:00 PM
W. Europe Standard Time-(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna 4/18/2017 5:00:00 PM
Central Europe Standard Time-(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague 4/18/2017 5:00:00 PM
Romance Standard Time-(UTC+01:00) Brussels, Copenhagen, Madrid, Paris 4/18/2017 5:00:00 PM
Central European Standard Time-(UTC+01:00) Sarajevo, Skopje, Warsaw, Zagreb 4/18/2017 5:00:00 PM
W. Central Africa Standard Time-(UTC+01:00) West Central Africa 4/18/2017 4:00:00 PM
Namibia Standard Time-(UTC+01:00) Windhoek 4/18/2017 4:00:00 PM
Jordan Standard Time-(UTC+02:00) Amman 4/18/2017 6:00:00 PM
GTB Standard Time-(UTC+02:00) Athens, Bucharest 4/18/2017 6:00:00 PM
Middle East Standard Time-(UTC+02:00) Beirut 4/18/2017 6:00:00 PM
Egypt Standard Time-(UTC+02:00) Cairo 4/18/2017 5:00:00 PM
E. Europe Standard Time-(UTC+02:00) Chisinau 4/18/2017 6:00:00 PM
Syria Standard Time-(UTC+02:00) Damascus 4/18/2017 6:00:00 PM
West Bank Standard Time-(UTC+02:00) Gaza, Hebron 4/18/2017 6:00:00 PM
South Africa Standard Time-(UTC+02:00) Harare, Pretoria 4/18/2017 5:00:00 PM
FLE Standard Time-(UTC+02:00) Helsinki, Kyiv, Riga, Sofia, Tallinn, Vilnius 4/18/2017 6:00:00 PM
Israel Standard Time-(UTC+02:00) Jerusalem 4/18/2017 6:00:00 PM
Kaliningrad Standard Time-(UTC+02:00) Kaliningrad 4/18/2017 5:00:00 PM
Libya Standard Time-(UTC+02:00) Tripoli 4/18/2017 5:00:00 PM
Arabic Standard Time-(UTC+03:00) Baghdad 4/18/2017 6:00:00 PM
Turkey Standard Time-(UTC+03:00) Istanbul 4/18/2017 6:00:00 PM
Arab Standard Time-(UTC+03:00) Kuwait, Riyadh 4/18/2017 6:00:00 PM
Belarus Standard Time-(UTC+03:00) Minsk 4/18/2017 6:00:00 PM
Russian Standard Time-(UTC+03:00) Moscow, St. Petersburg, Volgograd 4/18/2017 6:00:00 PM
E. Africa Standard Time-(UTC+03:00) Nairobi 4/18/2017 6:00:00 PM
Iran Standard Time-(UTC+03:30) Tehran 4/18/2017 7:30:00 PM
Arabian Standard Time-(UTC+04:00) Abu Dhabi, Muscat 4/18/2017 7:00:00 PM
Astrakhan Standard Time-(UTC+04:00) Astrakhan, Ulyanovsk 4/18/2017 7:00:00 PM
Azerbaijan Standard Time-(UTC+04:00) Baku 4/18/2017 7:00:00 PM
Russia Time Zone 3-(UTC+04:00) Izhevsk, Samara 4/18/2017 7:00:00 PM
Mauritius Standard Time-(UTC+04:00) Port Louis 4/18/2017 7:00:00 PM
Georgian Standard Time-(UTC+04:00) Tbilisi 4/18/2017 7:00:00 PM
Caucasus Standard Time-(UTC+04:00) Yerevan 4/18/2017 7:00:00 PM
Afghanistan Standard Time-(UTC+04:30) Kabul 4/18/2017 7:30:00 PM
West Asia Standard Time-(UTC+05:00) Ashgabat, Tashkent 4/18/2017 8:00:00 PM
Ekaterinburg Standard Time-(UTC+05:00) Ekaterinburg 4/18/2017 8:00:00 PM
Pakistan Standard Time-(UTC+05:00) Islamabad, Karachi 4/18/2017 8:00:00 PM
India Standard Time-(UTC+05:30) Chennai, Kolkata, Mumbai, New Delhi 4/18/2017 8:30:00 PM
Sri Lanka Standard Time-(UTC+05:30) Sri Jayawardenepura 4/18/2017 8:30:00 PM
Nepal Standard Time-(UTC+05:45) Kathmandu 4/18/2017 8:45:00 PM
Central Asia Standard Time-(UTC+06:00) Astana 4/18/2017 9:00:00 PM
Bangladesh Standard Time-(UTC+06:00) Dhaka 4/18/2017 9:00:00 PM
Omsk Standard Time-(UTC+06:00) Omsk 4/18/2017 9:00:00 PM
Myanmar Standard Time-(UTC+06:30) Yangon (Rangoon) 4/18/2017 9:30:00 PM
SE Asia Standard Time-(UTC+07:00) Bangkok, Hanoi, Jakarta 4/18/2017 10:00:00 PM
Altai Standard Time-(UTC+07:00) Barnaul, Gorno-Altaysk 4/18/2017 10:00:00 PM
W. Mongolia Standard Time-(UTC+07:00) Hovd 4/18/2017 11:00:00 PM
North Asia Standard Time-(UTC+07:00) Krasnoyarsk 4/18/2017 10:00:00 PM
N. Central Asia Standard Time-(UTC+07:00) Novosibirsk 4/18/2017 10:00:00 PM
Tomsk Standard Time-(UTC+07:00) Tomsk 4/18/2017 10:00:00 PM
China Standard Time-(UTC+08:00) Beijing, Chongqing, Hong Kong, Urumqi 4/18/2017 11:00:00 PM
North Asia East Standard Time-(UTC+08:00) Irkutsk 4/18/2017 11:00:00 PM
Singapore Standard Time-(UTC+08:00) Kuala Lumpur, Singapore 4/18/2017 11:00:00 PM
W. Australia Standard Time-(UTC+08:00) Perth 4/18/2017 11:00:00 PM
Taipei Standard Time-(UTC+08:00) Taipei 4/18/2017 11:00:00 PM
Ulaanbaatar Standard Time-(UTC+08:00) Ulaanbaatar 4/19/2017 12:00:00 AM
North Korea Standard Time-(UTC+08:30) Pyongyang 4/18/2017 11:30:00 PM
Aus Central W. Standard Time-(UTC+08:45) Eucla 4/18/2017 11:45:00 PM
Transbaikal Standard Time-(UTC+09:00) Chita 4/19/2017 12:00:00 AM
Tokyo Standard Time-(UTC+09:00) Osaka, Sapporo, Tokyo 4/19/2017 12:00:00 AM
Korea Standard Time-(UTC+09:00) Seoul 4/19/2017 12:00:00 AM
Yakutsk Standard Time-(UTC+09:00) Yakutsk 4/19/2017 12:00:00 AM
Cen. Australia Standard Time-(UTC+09:30) Adelaide 4/19/2017 12:30:00 AM
AUS Central Standard Time-(UTC+09:30) Darwin 4/19/2017 12:30:00 AM
E. Australia Standard Time-(UTC+10:00) Brisbane 4/19/2017 1:00:00 AM
AUS Eastern Standard Time-(UTC+10:00) Canberra, Melbourne, Sydney 4/19/2017 1:00:00 AM
West Pacific Standard Time-(UTC+10:00) Guam, Port Moresby 4/19/2017 1:00:00 AM
Tasmania Standard Time-(UTC+10:00) Hobart 4/19/2017 1:00:00 AM
Vladivostok Standard Time-(UTC+10:00) Vladivostok 4/19/2017 1:00:00 AM
Lord Howe Standard Time-(UTC+10:30) Lord Howe Island 4/19/2017 1:30:00 AM
Bougainville Standard Time-(UTC+11:00) Bougainville Island 4/19/2017 2:00:00 AM
Russia Time Zone 10-(UTC+11:00) Chokurdakh 4/19/2017 2:00:00 AM
Magadan Standard Time-(UTC+11:00) Magadan 4/19/2017 2:00:00 AM
Norfolk Standard Time-(UTC+11:00) Norfolk Island 4/19/2017 2:00:00 AM
Sakhalin Standard Time-(UTC+11:00) Sakhalin 4/19/2017 2:00:00 AM
Central Pacific Standard Time-(UTC+11:00) Solomon Is., New Caledonia 4/19/2017 2:00:00 AM
Russia Time Zone 11-(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky 4/19/2017 3:00:00 AM
New Zealand Standard Time-(UTC+12:00) Auckland, Wellington 4/19/2017 3:00:00 AM
UTC+12-(UTC+12:00) Coordinated Universal Time+12 4/19/2017 3:00:00 AM
Fiji Standard Time-(UTC+12:00) Fiji 4/19/2017 3:00:00 AM
Kamchatka Standard Time-(UTC+12:00) Petropavlovsk-Kamchatsky - Old 4/19/2017 4:00:00 AM
Chatham Islands Standard Time-(UTC+12:45) Chatham Islands 4/19/2017 3:45:00 AM
Tonga Standard Time-(UTC+13:00) Nuku'alofa 4/19/2017 4:00:00 AM
Samoa Standard Time-(UTC+13:00) Samoa 4/19/2017 4:00:00 AM
Line Islands Standard Time-(UTC+14:00) Kiritimati Island 4/19/2017 5:00:00 AM

Webinar Registration

Active Directory is the foundation of our networks. If AD isn't up, nothing else is. Not even cloud apps if you are using federation. Thankfully AD is pretty resilient – unless someone purposefully or accidentally destroys AD. It happens. Here's a list of examples I know of personally:

  1. Public accounting firm's IT audit team corrupts Active Directory at a client's site while collecting information
  2. Disgruntled admin, in a fit of rage, deletes an OU containing several thousand users
  3. Invalid bitmask in an IPv6 subnet definition in Microsoft Sites and Services
  4. Corrupted DIT file due to memory or disk errors
  5. Malicious outsider gains access to IT infrastructure of a company and deletes so much data company goes out of business
  6. Accidental DNS zone deletion brings down all customer access to a cloud SaaS provider

Most AD disasters we know of are accidental but note that US-CERT specifically calls out targeted destructive malware and protections to take with Active Directory.

CERT's guidance reflects that fact that today even seemingly mundane businesses and good organizations like hospitals are up against skilled attackers who are highly motivated and at best reckless.

As more malicious actors get into the ransomware game we can expect to see threat of destruction become another option for attackers that don't succeed in encrypting large amounts of data.

But beyond financially motivated attackers there are plenty other actors out there who are highly motivated to simply damage infrastructure or cause harm to their perceived enemies.

So let me ask you, if you were that person and gained access to a network; Where would you hit it to cause the greatest damage? Active Directory is the nerve center of your network.

In a recent conversation on this, I was surprised how many people think they can rely on Windows Server 2016's AD Recycle Bin. In this webinar my long-time colleague, Brian Hymer, and I will explore destructive risks to Active Directory. We will classify them into 5 types of AD destructive disasters:

  1. Domain node object deletion
  2. Special object deletion
  3. Attribute changes
  4. Group policy
  5. Forest level emergencies

For each of these areas we'll discuss your options for recovery including:

  • System-state recovery
  • Forest-level recovery
  • Recycle bin

We aren't talking about recovering individual domain controllers that go down. In this webinar we are focusing on when objects in AD are deleted or otherwise modified or when AD itself is corrupted beyond a single domain availability issue.

It basically comes down to this: unless it's simply a matter of domain node objects (users, groups, computers…) being deleted - there's a good chance the Recycle Bin just isn't going to cut it for you. AD is not as compartmentalized in terms of domains and domain controllers as many people think.

Brian and I will delve into all of these issues and make sure you understand how to prepare for and execute a successful forest recovery. Not something you want to do but you certainly want to know you can do it when it becomes necessary.

After that, Brian will briefly show you how Quest Recovery Manager for Active Directory can automatically protect your AD and help you recover a completely destroyed AD forest within a very short period of time. Please register now and join us for this real training for free ™.

First Name:   
Last Name:   
Work Email:  
Phone:  
Job Title:  
Organization:  
Country:    
Address:  
City:  
State:  
Zip/Postal Code:  
Organization Type :
 

Your information will be shared with the sponsor.