Securing Windows Server: firewall, LAPS, privileged accounts, event logs, BitLocker

Objective

Make a Windows server and its domain hard to attack and easy to monitor. Real attacks against Moroccan companies almost always follow the same path: a compromised workstation, the same local administrator password everywhere, a Domain Admins account used for everything, and logs that nobody reads. This lesson closes these doors one by one.