Meeting the InCommon Assurance profile criteria using Active Directory

[Brian Arkills <>]

http://blogs.technet.com/b/secguide/archive/2014/04/07/why-we-re-not-recommending-fips-mode-anymore.aspx

http://blogs.technet.com/b/secguide/archive/2014/04/07/security-baselines-for-windows-8-1-windows-server-2012-r2-and-internet-explorer-11.aspx

 

There’s not anything fundamentally game-changing here, but they are worth checking out, particularly the ‘recommended security baseline settings.docx’ which describes the new security settings that are available. The ‘pass the hash’ settings are of particular interest here, I think. Also possibly the recommended settings to block web browsers on DCs.

 

-B