Improsec Blog Storing Sensitive Data in Active Directory

Active Directory often acts as the primary data provider for connected systems and for this to be possible across a large number of IT systems, a system-wide unique identifier for each identity is needed. Enter the Social Security Number (SSN)” or CPR-Number in Denmark. As this number is unique for each person, many systems already use it as their primary unique identifier. So what’s not to like? Well, without proper attention to AD configurations, all users can see the attributes of all other users.. Protect your users from over-sharing and your company from GDPR breaches by reading this helpful blog.