← Back to projects
Cybersecurity — Infrastructure hardening
Active Directory Audit & Hardening
Windows ServerActive DirectoryPowerShellANSSIFGPP
Context
Over time, an Active Directory domain accumulates configuration drift — a single password policy applied to every account, inherited GPOs never reviewed, overly broad rights — each one a foothold for privilege escalation.
What was done
Security audit of the Windows Server Active Directory environment, scoring the gaps found against the ANSSI hardening framework. Remediation scripted in PowerShell: fine-grained password policies (FGPP) to separate privileged accounts from standard ones, and GPO hardening on the findings raised by the audit.
Result
Gaps prioritized against the ANSSI framework and fixed through repeatable PowerShell scripts, making the hardening reproducible and compliance checkable over time.