Implement the Active Directory Tiered Administration Model (Tier 0/1/2)
TrackSeparate Domain Admin, server admin, and workstation admin credentials into isolated tiers to block lateral movement and privilege escalation.
Updated Jul 9, 2026Microsoft Active Directory · Microsoft Windows Server