Agent-Skills.md

Agent Skills: Configuring Active Directory Tiered Model

Implement Microsoft's Enhanced Security Admin Environment (ESAE) tiered administration model for Active Directory. Covers Tier 0/1/2 separation, privileged access workstations (PAWs), administrative f

UncategorizedID: autohandai/community-skills/configuring-active-directory-tiered-model

Repository

autohandai/community-skills
autohandaiLicense: Apache-2.0
103

Install this agent skill to your local

pnpm dlx add-skill https://github.com/autohandai/community-skills/tree/HEAD/configuring-active-directory-tiered-model

Skill Files

Browse the full folder contents for configuring-active-directory-tiered-model.

Download Skill

Loading file tree…

configuring-active-directory-tiered-model/SKILL.md

Skill Metadata

Name
configuring-active-directory-tiered-model
Description
Implement Microsoft's Enhanced Security Admin Environment (ESAE) tiered administration model for Active Directory. Covers Tier 0/1/2 separation, privileged access workstations (PAWs), administrative f

Configuring Active Directory Tiered Model

Overview

Implement Microsoft's Enhanced Security Admin Environment (ESAE) tiered administration model for Active Directory. Covers Tier 0/1/2 separation, privileged access workstations (PAWs), administrative forest design, authentication policy silos, and credential theft mitigation.

Objectives

  • Implement comprehensive configuring active directory tiered model capability
  • Establish automated discovery and monitoring processes
  • Integrate with enterprise IAM and security tools
  • Generate compliance-ready documentation and reports
  • Align with NIST 800-53 access control requirements

Security Controls

| Control | NIST 800-53 | Description | |---------|-------------|-------------| | Account Management | AC-2 | Lifecycle management | | Access Enforcement | AC-3 | Policy-based access control | | Least Privilege | AC-6 | Minimum necessary permissions | | Audit Logging | AU-3 | Authentication and access events | | Identification | IA-2 | User and service identification |

Verification

  • [ ] Implementation tested in non-production environment
  • [ ] Security policies configured and enforced
  • [ ] Audit logging enabled and forwarding to SIEM
  • [ ] Documentation and runbooks complete
  • [ ] Compliance evidence generated