Skillplan AD Checklist
2026-05-20 16:33
AD
Security Checklist
de
en
fr
it
System Online
← Back to sections
Mitigation Controls · Section 12 of 17
Mitigating a Silver Ticket
Assessment Progress
0
/ 95 items
0%
Fulfillment so far
0
/ 0 controls
0%
Explain this attack
Create User objects with SPNs as group Managed Service Accounts (gMSAs).
Not Fulfilled
Fulfilled
Accepted
Change all computer object (including Domain Controller) passwords every 30 days.
Not Fulfilled
Fulfilled
Accepted
Ensure computer objects are not members of privileged security groups, such as the Domain Admins security group.
Not Fulfilled
Fulfilled
Accepted
Ensure the Domain Computers security group does not have write or modify permissions to any objects in Active Directory.
Not Fulfilled
Fulfilled
Accepted
Save and Continue →
