Microsoft is keeping the fast pace with update to the star of their “classic” AD security solution
So we saw version 1.7 drop yesterday
New Major Features are
· Role based access control.
· Windows Server core support.
· Reconnaissance using Directory Services Enumeration detection.
· Pass-the-Ticket detections enhancements.
Unusual Protocol Implementation detection enhancements
Personally we are looking fwd to RBAC its a major improvement for the majority of our customers and highly requested
Starting the install , we are upgrading fra 1.6.1 , we have a few enviroments on 1.4 and there is NO direct upgrade to 1.7
At upgrade we can either upgrade the whole database or do a partial migration , we opted for partial as having ATA offline for a longer duration wasnt a option , the database is placed on SSD so its unlikely it will take a day but we will test that in another enviroment
New UX for updating agent and improved progress indicator
And we now have a few new security groups
This now means we can give auditors access to the enviroment without handing them the keys to the kingdom