Active Directory Security Assessment

An Active Directory security assessment shows how an attacker who compromises a single user or workstation could take over your entire Windows domain. Active Directory controls access to almost everything in most organisations, which makes it the primary target in ransomware and targeted attacks.

What We Assess

• Privilege escalation paths to Domain Admin and other high-value groups.
• Kerberos attacks: Kerberoasting, AS-REP roasting and delegation abuse.
• Weak policies: passwords, lockout, stale accounts and privileged account hygiene.
• ACL and permission misconfigurations on users, groups and Group Policy Objects.
• Active Directory Certificate Services (AD CS) misconfigurations.
• Hybrid identity: Entra ID (Azure AD) Connect and synchronisation risks.

Our Approach

Starting from a standard domain user account, we map relationships and permissions across your directory, identify realistic attack paths and safely validate them. Testing is non-destructive and carried out under agreed rules of engagement, either on site or remotely through a secure connection.

What You Get

• Attack-path diagrams showing exactly how domain compromise could happen.
• Prioritised findings with clear remediation and hardening steps.
• Quick wins to break the most dangerous paths first.
• A retest to confirm the fixes.

Why Offensium Vault

• Real-world attack techniques used by ransomware operators, applied safely.
• Practical hardening advice your IT team can implement.
• ISO 27001 and ISO 9001 certified processes with strict confidentiality.

Often combined with internal network penetration testing and purple teaming.

Frequently Asked Questions

Do you need domain admin access?

No. We usually start with a standard user account, the same position an attacker has after phishing an employee.

Will the assessment disrupt users?

No. We avoid disruptive techniques such as account lockouts and coordinate any sensitive tests with your team.

How often should Active Directory be assessed?

At least annually, and after major changes such as mergers, migrations or hybrid identity projects.

Get a Quote

Tell us about your environment and timelines and we will send a clear, fixed-scope proposal. Contact Offensium Vault or book a free call with our team.