https://www.kinleong.co.uk/blog/ Active Directory and Entra ID problems, solved step by step with Active Identity Guardian. en-gb Tue, 06 Oct 2026 07:00:00 GMT https://www.kinleong.co.uk/blog/brute-force-or-password-spray/ https://www.kinleong.co.uk/blog/brute-force-or-password-spray/ Tue, 06 Oct 2026 07:00:00 GMT Peter Chan Active Directory The Security logs fill with failed logons and accounts start locking out. Here is how to tell a brute-force attack from a password spray, see where it came from, and spot the attempt that got in. https://www.kinleong.co.uk/blog/who-gave-this-account-an-entra-id-admin-role/ https://www.kinleong.co.uk/blog/who-gave-this-account-an-entra-id-admin-role/ Tue, 06 Oct 2026 07:00:00 GMT Peter Chan Entra ID An account has turned up with an admin role in Microsoft Entra ID and nobody remembers granting it. Here is how to see who assigned it, when and from which IP address, and which Global Administrators are permanent. https://www.kinleong.co.uk/blog/who-changed-group-policy-and-what-changed/ https://www.kinleong.co.uk/blog/who-changed-group-policy-and-what-changed/ Tue, 06 Oct 2026 07:00:00 GMT Peter Chan Active Directory Windows Firewall is suddenly off on your workstations, and a Group Policy change is the likely cause. Here is how to find who changed which GPO, when, from where, and exactly which setting changed. https://www.kinleong.co.uk/blog/who-added-user-to-domain-admins/ https://www.kinleong.co.uk/blog/who-added-user-to-domain-admins/ Tue, 06 Oct 2026 07:00:00 GMT Peter Chan Active Directory An account has turned up in Domain Admins and nobody remembers adding it. Here is how to see who did it, when, from which machine, and the risk it created, in under a minute. https://www.kinleong.co.uk/blog/get-alerted-before-entra-id-app-secret-expires/ https://www.kinleong.co.uk/blog/get-alerted-before-entra-id-app-secret-expires/ Tue, 06 Oct 2026 07:00:00 GMT Peter Chan Entra ID A client secret expired at the weekend and an integration stopped working. Here is how to see every expiring secret and certificate in advance, give each one an owner, and get alerted in time.