Securing and protecting Active Directory: Securing privileged access in Active Directory

Privileges provide a user the ability to perform an action that is typically left for administrators. Privileges should be known, maintained, and tracked at every turn. Without the knowledge of who has privileges, nearly anything could change in Active Directory without anyone knowing. Knowing how privileges are granted and how to monitor them is the biggest challenge.