👋 Hello everyone, and welcome to the first issue of AD News!
Nothing too crazy happened last week. A few interesting bugs and issues, but most importantly, Microsoft Ignite is coming up!
If you missed my first posts here, I’ve already published a short introduction about myself and an overview of Active Directory content at Microsoft Ignite. You’ll find both in the bottom section of this issue.
What can you expect from AD News?
📅 Every Thursday, I’ll share a roundup of what’s happened over the past seven days in the world of Active Directory and Windows.
🔒 Every Tuesday, I’ll post something interesting in the Notes section, usually related to Active Directory security. You can find an example at the bottom of this issue, too.
I’ll also include a little poll at the beginning of each issue to make things more interactive. And who knows, maybe we’ll add something more in the future!
Enjoy!
(Please, I love getting feedback, both positive and negative, so I can keep improving things for you. I can take it, really! 😄)
🗳️ The Weekly Query
Sponsored by:
Still using ADUC? Use this free tool instead!
Who’s locked out?
Whose password expires next?
When did this user last log on?EasyEntra puts the answers right in your AD user list with multiple columns you won’t find in the standard Active Directory Users & Computers view.
Sort by Locked Out to bring affected accounts to the top, or scan password expiry dates across users. No PowerShell script to write. No account properties to open.
EasyEntra is completely free for on-premises AD management, installs in a minute, and carries no infrastructure or security changes.
🏛️ Active Directory Domain Services
The never fixed reference integrity bug since Windows 2000 (It was never working until now) • Christoffer Andersson
A 26-year-old Active Directory bug affecting cross-domain references is finally getting fixedFrom Vendor to Vulnerability: How Big-Name Products Degrade Your AD Security • Abdul Mhanni
Official vendor guides can lead to Domain Admin too
🖥️ Windows OS
Raising the bar for 8 GB Windows 11 PCs: what’s improved and how to get it • Pavan Davuluri
Microsoft is fighting hard to improve the responsiveness in Windows 11Windows Server at Microsoft Ignite 2026 • Yash Shekar
A preview of the next Windows Server release, including Active Directory, Hyper-V, security and moreWindows Server 2025 gets support for quick machine recovery • Sergiu Gatlan
This might come in handy - Microsoft can fix boot issues remotely
⚔️ Attacks and Detection
From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths • Sagar Patil, Jesse Birch and Tal Tzhori
Do you have AD CS? If yes, you should know about ESC vulnerabilitiesDefeating enforced SMB signing: a note • Lydéric Lefebvre
A missing identity check allowed attackers to bypass enforced SMB signing
⚠️ Issues and Bugs
Microsoft’s Canada timezone troubles leave admins fixing calendars • Carly Page
Outlook meetings, recurring events and other Microsoft services are affected by Canada’s time zone changes
👨💻 David’s Corner
Before We Begin, A Little About Me • David Horak
The person behind the workActive Directory @ Microsoft Ignite 2026 • David Horak
Active Directory-ish related content at Microsoft IgniteTuesday Note • David Horak
Want to get featured on AD News? → Submit your content 😎