Welcome to another episode of Directory Insights in 10 Minutes, powered by Guardians of the Directory. In this quick-hitting session, host Craig Birch walks through the process of identifying and remediating accounts in Active Directory that still rely on outdated Kerberos DES encryption.

🔐 DES is insecure and easily exploited by attackers. Craig shows you how to detect and update these accounts using both GUI and PowerShell—so you can act fast to protect your environment.

👉 If you find this helpful, give us a like, drop a comment, and suggest a topic for a future episode!

• Why DES-only encryption is dangerous in modern AD environments

• How to detect DES accounts using PowerShell

• Remediation using Set-ADUserAccountControl

• Upgrading users to use stronger AES encryption

• Fast, actionable tips to secure your Active Directory

🛠️ Key Takeaways:

Why DES-only encryption is dangerous in modern AD environments

• How to detect DES accounts using PowerShell

• Remediation using Set-ADUserAccountControl

• Upgrading users to use stronger AES encryption

• Fast, actionable tips to secure your Active Directory