Browse categories
Explore
Fiverr Pro
English
$
USD
I will harden active directory security and upgrade your domain controllers
Microsoft Entra ID and Active Directory Security Architect
Microsoft Identity Security Architect with 15+ years protecting enterprises in Aerospace, Healthcare and Banking. I secure Entra ID (Azure AD), Active Directory and Microsoft 365 from identity attacks...
About this Gig
Is your Active Directory ready for todays attacks and Microsofts upcoming changes?
- Windows Server 2016 support ends on 12 January 2027
- Microsoft has started blocking NTLMv1 by default (Oct 2026 updates)
Most ransomware attacks take over Active Directory first. I find the gaps and fix them safely, without breaking your users or apps.
Hardening:
- Tiered admin model (Tier 0/1/2) and privileged group clean-up
- Disable NTLMv1, SMBv1 and other legacy protocols
- Deploy Windows LAPS for local admin passwords
- Microsoft and CIS security baselines through GPO
- Secure domain controllers: patching, antivirus and monitoring agents
Remediation:
- Fix findings from your security team, auditor or pentest report
Upgrade and consolidation:
- Upgrade DCs to Windows Server 2022/2025
- Raise domain and forest functional levels
Why me:
15+ years as an Identity Security Architect; managed AD estates of 250,000 users and recovered AD forests after ransomware.
Every environment is different, so please message me before ordering. I'll review your setup and recommend the right package.
Server:
File server
•
Windows server
•
DNS
•
NTP
•
Other
Operating system:
Windows
•
Vmware
FAQ
Will hardening break our apps or users?
No. I audit first (for example, NTLMv1 and SMBv1 usage), test changes on a pilot group, and only then enforce. Every change has a rollback plan.
We have a security or pentest report. Can you fix the findings?
Yes. Share the report after ordering. I’ll prioritise the findings by risk and fix them, or give your team step-by-step guidance.
How do you access our on-prem Active Directory?
Through a remote session that you control and can end at any time. I only need a temporary admin account for the duration of the work.
Our domain controllers run Windows Server 2016. Do we need to act?
Yes. Extended support ends on 12 January 2027, after which there are no more security updates. Upgrading before then is strongly recommended.
Do you do domain or forest consolidation?
Yes. These are larger projects, so message me for a custom offer.
