AD health & security assessment
Domain controllers, trusts, privileged groups, delegation, and Kerberos risk, ranked by real impact.
Identity infrastructure · Lehi, Utah
Bring order to the directory everything else depends on. Hands-on AD design, consolidation, and migration, applied to securing what you have and planning the move to cloud-native identity.
Local context
Lehi sits at the heart of Silicon Slopes, with SaaS companies scaling from a few dozen people to several thousand. Identity built for a startup rarely survives that growth intact, and Copilot is often the moment the gaps show.
Whether you're a growing team in Lehi or an established company in Utah County, the work is the same: understand what your environment actually looks like today, fix the highest-risk issues first, and leave your team with something they can run.
What I deliver
Domain controllers, trusts, privileged groups, delegation, and Kerberos risk, ranked by real impact.
Separate admin accounts, a tiered admin model, and no standing Domain Admin rights.
Merge domains and forests, retire stale objects, and fix OUs and Group Policy.
Decide what stays on-premises and plan the rest of the move to Entra ID.
How it works
A short call and a read-only review of your tenant to confirm goals, constraints, and scope.
Evidence-based findings drawn from your actual configuration, ranked by risk and effort.
Staged, reversible changes alongside your IT team or MSP, with rollback plans.
Documentation, runbooks, and a prioritized backlog your team can own.
FAQ
Yes. I serve Utah with regular on-site visits in Salt Lake City, Lehi and Provo for workshops, CAB reviews and readouts in Lehi. Most hands-on identity work happens remotely, which keeps costs down.
Maybe not, but most organizations still depend on it for file servers, legacy apps, or devices. I'll map those dependencies so you can decide what to keep.
Low when it's staged. Every change is inventoried first, staged, and reversible, with a rollback plan for anything that touches authentication.
With a free 30-minute call, followed by a fixed-scope assessment or a fractional CIO plan with a fixed monthly fee. You'll know the cost and deliverables before any work begins.
A free 30-minute call about your environment. You'll leave with at least three concrete next steps, whether or not we work together.
Book a 30-minute call