AD health & security assessment
Domain controllers, trusts, privileged groups, delegation, and Kerberos risk, ranked by real impact.
Identity infrastructure · Salt Lake City, Utah
Bring order to the directory everything else depends on. Hands-on AD design, consolidation, and migration, applied to securing what you have and planning the move to cloud-native identity.
Local context
Salt Lake City mixes long-established enterprises, healthcare and financial services firms, and a fast-growing startup scene downtown. Many organizations here run hybrid identity that has grown over decades, alongside newer cloud-first teams.
Whether you're a growing team in Salt Lake City or an established company in Salt Lake County, the work is the same: understand what your environment actually looks like today, fix the highest-risk issues first, and leave your team with something they can run.
What I deliver
Domain controllers, trusts, privileged groups, delegation, and Kerberos risk, ranked by real impact.
Separate admin accounts, a tiered admin model, and no standing Domain Admin rights.
Merge domains and forests, retire stale objects, and fix OUs and Group Policy.
Decide what stays on-premises and plan the rest of the move to Entra ID.
How it works
A short call and a read-only review of your tenant to confirm goals, constraints, and scope.
Evidence-based findings drawn from your actual configuration, ranked by risk and effort.
Staged, reversible changes alongside your IT team or MSP, with rollback plans.
Documentation, runbooks, and a prioritized backlog your team can own.
FAQ
Yes. I serve Utah with regular on-site visits in Salt Lake City, Lehi and Provo for workshops, CAB reviews and readouts in Salt Lake City. Most hands-on identity work happens remotely, which keeps costs down.
Maybe not, but most organizations still depend on it for file servers, legacy apps, or devices. I'll map those dependencies so you can decide what to keep.
Low when it's staged. Every change is inventoried first, staged, and reversible, with a rollback plan for anything that touches authentication.
With a free 30-minute call, followed by a fixed-scope assessment or a fractional CIO plan with a fixed monthly fee. You'll know the cost and deliverables before any work begins.
A free 30-minute call about your environment. You'll leave with at least three concrete next steps, whether or not we work together.
Book a 30-minute call