How Azure AD Kerberos Works

I recently recorded a presentation on the internals of hybrid Windows authentication. Go watch it.

Active Directory delegation is an often misunderstood technology. Here's an in-depth look at how it works.

User Account Control is a local authorization mechanism. Can you bypass it by going through the network? No. Here's why.

FIDO is how we're tackling passwordless authentication. Have you ever wondered how it works?

FAST Armoring is a Kerberos extension intended to improve the security of the Kerberos protocol.

Domain trusts are complicated. Here's how they work.

Let's talk Azure AD join and what that means to a Windows device. What's it mean to be joined to something?

Kerberos is an authenticated key agreement protocol based on the Needham-Schroeder protocol. That's too complicated -- let's break it down a little.

Have you ever wondered how authentication works for things like Remote Desktop?

Have you ever wondered what happens behind the scenes when you type your password into the Windows logon screen and hit enter?