[{"data":1,"prerenderedAt":1693},["ShallowReactive",2],{"sc:header-data-is":3,"sc:footer-data-is":489,"post-is--posts-2026-01-27-exchange-active-directory-150f55880e8d67":518,"authors_data":1106,"content-is-list-7b291c2dd91a4":1461,"authors_data:​Thorsten Kunzi​":1691},{"lang":4,"home":5,"navigation":17,"meta":479,"contact":485},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"is":13},{"title":14,"url":15,"alt":16},"Heim","/is","glueckkanja Logo",[18,127,231,316,395,402],{"name":19,"languages":20,"children":24},"workplace",{"is":21},{"title":22,"description":23},"Workplace","Knúið af Microsoft 365 fyrir snjalla, örugga og sveigjanlega vinnustaði, með nútímalegri tækni og auðkennisþjónustum samþættum.",[25,55,91],{"name":26,"languages":27,"children":30},"portfolio",{"is":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"is":34},{"title":35,"url":36},"Managed Intune","/is/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"is":40},{"title":41,"url":42},"Managed Entra","/is/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"is":46},{"title":47,"url":48},"Managed Workplace","/is/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"is":52},{"title":53,"url":54},"Consulting Services","/is/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"is":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,85],{"name":62,"languages":63},"microsoft-entra-suite",{"is":64},{"title":65,"url":66},"Microsoft Entra Suite","/is/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"is":70},{"title":71,"url":72},"Microsoft Intune","/is/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"is":76},{"title":77,"url":78},"Microsoft Windows","/is/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{"is":82},{"title":83,"url":84},"Windows 365 Cloud PC","/is/workplace/windows365-cloud-pc",{"name":86,"languages":87},"cloud-workplace-foundation",{"is":88},{"title":89,"url":90},"Cloud Workplace Foundation","/is/workplace/cloud-workplace-foundation",{"name":92,"languages":93,"children":96},"microsoft-365-collaboration",{"is":94},{"title":95},"Microsoft 365 Collaboration",[97,103,109,115,121],{"name":98,"languages":99},"microsoft-copilot",{"is":100},{"title":101,"url":102},"Microsoft 365 Copilot","/is/workplace/microsoft-365-copilot",{"name":104,"languages":105},"microsoft-teams",{"is":106},{"title":107,"url":108},"Teams","/is/workplace/microsoft-teams",{"name":110,"languages":111},"sharepoint-powerplatform",{"is":112},{"title":113,"url":114},"SharePoint & Power Platform","/is/workplace/sharepoint-power-platform",{"name":116,"languages":117},"exchange-online",{"is":118},{"title":119,"url":120},"Exchange Online","/is/workplace/exchange-online",{"name":122,"languages":123},"information-protection-compliance",{"is":124},{"title":125,"url":126},"Information Protection & Compliance","/is/workplace/information-protection-compliance",{"name":128,"languages":129,"children":133},"azure",{"is":130},{"title":131,"description":132},"Azure","Vöxtur með Azure: lækkaðu cloud-kostnað, auktu skilvirkni og knýðu áfram nýsköpun með IaaS og PaaS.",[134,151,181],{"name":135,"languages":136,"children":138},"azure-portfolio",{"is":137},{"title":29},[139,145],{"name":140,"languages":141},"azure-managed-services",{"is":142},{"title":143,"url":144},"Azure Managed Services","/is/azure/azure-managed-services",{"name":146,"languages":147},"azure-consulting",{"is":148},{"title":149,"url":150},"Azure Consulting","/is/azure/azure-consulting",{"name":152,"languages":153,"children":156},"azure-scenarios",{"is":154},{"title":155},"Sviðsmyndir",[157,163,169,175],{"name":158,"languages":159},"plan-your-cloud",{"is":160},{"title":161,"url":162},"Skipuleggðu skýið þitt","/is/azure/plan-your-cloud",{"name":164,"languages":165},"migrate-to-the-cloud",{"is":166},{"title":167,"url":168},"Flyttu í skýið","/is/azure/migrate-to-the-cloud",{"name":170,"languages":171},"innovate-your-business",{"is":172},{"title":173,"url":174},"Nýsköpun í rekstrinum þínum","/is/azure/innovate-your-business",{"name":176,"languages":177},"vmware-exit",{"is":178},{"title":179,"url":180},"Endurhugsaðu VMware-stefnuna þína","/is/azure/vmware-exit",{"name":182,"languages":183,"children":186},"azure-practices",{"is":184},{"title":185},"Practices",[187,193,199,202,208,213,219,225],{"name":188,"languages":189},"azure-foundation",{"is":190},{"title":191,"url":192},"Azure Foundation","/is/azure/azure-foundation",{"name":194,"languages":195},"azure-ai-foundation",{"is":196},{"title":197,"url":198},"Azure AI Foundation","/is/azure/azure-ai-foundation",{"name":86,"languages":200},{"is":201},{"title":89,"url":90},{"name":203,"languages":204},"azure-data-foundation",{"is":205},{"title":206,"url":207},"Azure Data Foundation","/is/azure/azure-data-foundation",{"name":188,"languages":209},{"is":210},{"title":211,"url":212},"Azure Container Foundation","/is/azure/azure-container-foundation",{"name":214,"languages":215},"dark-tenant",{"is":216},{"title":217,"url":218},"Managed Dark Tenant","/is/azure/managed-dark-tenant",{"name":220,"languages":221},"azure-cloud-adoption-framework",{"is":222},{"title":223,"url":224},"Cloud Adoption Framework","/is/azure/cloud-adoption-framework",{"name":226,"languages":227},"azure-cloud-competence-center",{"is":228},{"title":229,"url":230},"Cloud Competence Center","/is/azure/cloud-competence-center",{"name":232,"languages":233,"children":242},"security",{"is":234},{"title":235,"description":236,"emergency":237},"Security","Árvekni í skýinu með margverðlaunaðri 24/7 managed service, incident response og nútímalegri vörn fyrir innviðina þína.",{"text":238,"href":239,"skin":240,"icon":241},"Undir árás?","/is/security/are-you-under-attack","primary","emergency",[243,268,289],{"name":244,"children":245},"security-security-consulting",[246,252,256,262],{"name":247,"languages":248},"managed-red-tenant",{"is":249},{"title":250,"url":251},"Managed Red Tenant","/is/security/managed-red-tenant",{"name":214,"languages":253},{"is":254},{"title":255,"url":218},"Dark Tenant",{"name":257,"languages":258},"sentinel-data-lake",{"is":259},{"title":260,"url":261},"Sentinel Data Lake","/is/security/sentinel-data-lake",{"name":263,"languages":264},"security-consulting",{"is":265},{"title":266,"url":267},"Security Consulting","/is/security/security-consulting",{"name":269,"children":270},"security-cloud-security-operations-center",[271,277,283],{"name":272,"languages":273},"cloud-security-operations-center",{"is":274},{"title":275,"url":276},"Cloud Security Operations Center","/is/security/cloud-security-operations-center",{"name":278,"languages":279},"global-secure-access",{"is":280},{"title":281,"url":282},"Global Secure Access","/is/security/global-secure-access",{"name":284,"languages":285},"my-work-id",{"is":286},{"title":287,"url":288},"MyWorkID","/is/security/my-work-id",{"name":290,"children":291},"security-preventive-services",[292,298,304,310],{"name":293,"languages":294},"preventive-services",{"is":295},{"title":296,"url":297},"Preventive Services","/is/security/preventive-services",{"name":299,"languages":300},"data-security-services",{"is":301},{"title":302,"url":303},"Data Security Service","/is/security/data-security-service",{"name":305,"languages":306},"security-copilot-agents",{"is":307},{"title":308,"url":309},"Security Copilot Agents","/is/security/security-copilot-agents",{"name":311,"languages":312},"nis2",{"is":313},{"title":314,"url":315},"Innleiðing NIS2","/is/security/red-dark-tenant-nis2",{"name":317,"languages":318,"children":322},"products",{"is":319},{"title":320,"description":321},"Vörur","Fylgivörur fyrir öruggt, 100 % cloud-native Microsoft-umhverfi sem styrkja samstarf, netauðkenningu og hugbúnaðarstjórnun.",[323,360],{"name":324,"products":325,"children":326},"lorem ipsum 1",true,[327,336,344,352],{"name":328,"img":329,"target":330,"languages":331},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"is":332},{"title":333,"url":334,"subtitle":335},"RealmJoin","https://www.realmjoin.com","Skýbundin hugbúnaðardreifing",{"name":337,"img":338,"target":330,"languages":339},"scepman","products/scepman/scepman-nav-logo.svg",{"is":340},{"title":341,"url":342,"subtitle":343},"SCEPman","https://www.scepman.com","Skírteinadreifing úr skýinu",{"name":345,"img":346,"target":330,"languages":347},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"is":348},{"title":349,"url":350,"subtitle":351},"KONNEKT","https://www.konnekt.io","Vinndu með staðbundnu Office 365-gögnin þín",{"name":353,"img":354,"target":330,"languages":355},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"is":356},{"title":357,"url":358,"subtitle":359},"RealMigrator","https://www.realmigrator.com","Flyttu gögnin þín milli netþjóna",{"name":361,"products":325,"children":362},"lorem ipsum 2",[363,371,379,387],{"name":364,"img":365,"target":330,"languages":366},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"is":367},{"title":368,"url":369,"subtitle":370},"TerraProvider","https://www.terraprovider.com","Terraform Provider for Microsoft 365",{"name":372,"img":373,"target":330,"languages":374},"radiusaas","products/radius/radius-nav-logo.svg",{"is":375},{"title":376,"url":377,"subtitle":378},"RADIUSaaS","https://www.radius-as-a-service.com","Auðkenning fyrir netið þitt",{"name":380,"img":381,"target":330,"languages":382},"unifiedcontacts","products/unified-contacts/unifiedcontact-nav-logo.svg",{"is":383},{"title":384,"url":385,"subtitle":386},"Unified Contacts","https://www.unified-contacts.com","Finndu tengiliði í Microsoft Teams",{"name":388,"img":389,"target":330,"languages":390},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"is":391},{"title":392,"url":393,"subtitle":394},"Autopilot Monitor","https://www.autopilotmonitor.com","Rauntímaeftirlit með Windows Autopilot",{"name":396,"languages":397},"casestudies",{"is":398},{"title":399,"url":400,"description":401},"Case Studies","/is/casestudies","Frumkvöðull í skýinu: Microsoft-samstarfsaðilinn þinn fyrir cloud-lausnir með blueprint-nálgun og sérþekkingu í Infrastructure-as-Code.",{"name":403,"languages":404,"children":407},"company",{"is":405},{"title":406,"description":401},"Fyrirtækið",[408,438,462],{"name":409,"languages":410,"children":413},"company-about-us",{"is":411},{"title":412},"Um okkur",[414,420,426,432],{"name":415,"languages":416},"company-facts-figures",{"is":417},{"title":418,"url":419},"Staðreyndir og tölur","/is/company/facts-and-figures",{"name":421,"languages":422},"company-contact",{"is":423},{"title":424,"url":425},"Tengiliðir og staðsetningar","/is/company/contact-and-locations",{"name":427,"languages":428},"switzerland",{"is":429},{"title":430,"url":431}," glueckkanja Switzerland","/is/company/switzerland",{"name":433,"languages":434},"austria",{"is":435},{"title":436,"url":437},"glueckkanja Austria","/is/company/austria",{"name":439,"languages":440,"children":443},"company-career",{"is":441},{"title":442},"Störf",[444,450,456],{"name":445,"languages":446},"company-career-overview",{"is":447},{"title":448,"url":449},"Yfirlit yfir störf","/is/career",{"name":451,"languages":452},"company-young-professionals",{"is":453},{"title":454,"url":455},"Young Professionals","/is/young-professionals",{"name":457,"languages":458},"company-jobs",{"is":459},{"title":460,"url":461},"Laus störf","/is/job-offers",{"name":463,"languages":464,"children":467},"company-latest",{"is":465},{"title":466},"Nýjast",[468,474],{"name":469,"languages":470},"company-blog",{"is":471},{"title":472,"url":473},"Blogg","/is/blog",{"name":469,"languages":475},{"is":476},{"title":477,"url":478},"Viðburðir","/is/events",[480],{"name":481,"languages":482},"career-meta",{"is":483},{"title":442,"url":449,"active":484},false,{"languages":486},{"is":487},{"title":488,"url":425,"active":484},"Tengiliður",{"data":490},{"bgColor":491,"number":492,"mail":493,"brandLogos":494,"logos":495,"links":499,"linksIs":509},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[496],{"img":10,"alt":16,"url":497,"class":498},"index.html","max-w-19rem",[500,503,506],{"title":501,"url":502},"Datenschutz","/de/privacy",{"title":504,"url":505},"Impressum","/de/imprint",{"title":507,"url":508},"No Cookies","/de/cookies",[510,513,516],{"title":511,"url":512},"Privacy","/is/privacy",{"title":514,"url":515},"Imprint","/is/imprint",{"title":507,"url":517},"/is/cookies",{"id":519,"title":520,"author":521,"body":523,"cta":494,"description":1059,"eventid":494,"extension":1078,"hideInRecent":325,"layout":1079,"meta":1080,"moment":1084,"navigation":325,"path":1102,"seo":1103,"stem":1104,"tags":494,"webcast":484,"__hash__":1105},"content_is/posts/2026-01-27-exchange-active-directory.md","Exchange AD Split Permissions án eftirsjár",[522],"​Thorsten Kunzi​",{"type":524,"value":525,"toc":1058},"minimal",[526,531,535,542,546,573,576,580,586,601,607,610,614,650,669,674,680,689,693,709,713,720,724,734,739,744,763,767,793,797,817,825,841,855,915,919,943,960,972,985,992,996,1006,1017,1029,1033,1036,1039,1054],[527,528,530],"h3",{"id":529},"tldr-hvað-ef-við-fjarlægjum-gallana","TLDR: hvað ef við fjarlægjum gallana?",[532,533,534],"p",{},"Ég fann leið til að veita aftur AD- og RBAC-heimildir þar sem Exchange notendur, hópar, tengiliðir o.s.frv. eru staðsettir. Þannig þarf enga aðlögun hjá stjórnendum eða identity management kerfum, sem að minni reynslu var helsta hindrunin fyrir því að fyrirtæki tækju þetta upp. Og við fáum samt öryggisávinninginn gegn lateral movement og domain compromise.",[532,536,537],{},[538,539],"img",{"alt":540,"src":541},"Active Directory","https://res.cloudinary.com/c4a8/image/upload/v1770991330/blog/pics/Blog_-_Exchange_AD_Split_Permissions_-_1.png",[527,543,545],{"id":544},"þetta-næst-í-þremur-skrefum","Þetta næst í þremur skrefum:",[547,548,549,563,568],"ol",{},[550,551,552,553,560],"li",{},"Innleiða ",[554,555,559],"a",{"href":556,"rel":557},"https://learn.microsoft.com/en-us/exchange/permissions/split-permissions/configure-exchange-for-split-permissions#switch-to-active-directory-split-permissions",[558],"nofollow","AD split permission líkanið",[561,562],"br",{},[550,564,565,566],{},"Veita Exchange serverum þær AD-heimildir sem tapast, en aðeins á viðeigandi OUs",[561,567],{},[550,569,570,571],{},"Veita Exchange RBAC til að endurvirkja PowerShell cmdlets sem vantar",[561,572],{},[532,574,575],{},"Allt í gegnum leiðbeiningar Microsoft, AD ACLs eða Exchange RBAC-úthlutanir.",[527,577,579],{"id":578},"af-hverju-skiptir-þetta-máli-núna","Af hverju skiptir þetta máli (núna)?",[532,581,582,583,585],{},"Þetta hefur að mestu verið vanrækt eða hunsað síðan það var kynnt með Exchange 2010 SP1. En sjálfgefna shared permissions líkanið felur í sér verulega öryggisáhættu fyrir yfirtöku á Active Directory. Þegar Exchange hefur að auki verið alræmt fyrir remote exploits síðustu ár, er kominn tími til að bregðast við.",[561,584],{},"\nVandinn stafar af heimildum sem veittar eru á rót lénsins og erfast í gegnum allt lénið.",[587,588,589,592,595,598],"ul",{},[550,590,591],{},"breyta heimildum á notendum og hópum (í raun fullur aðgangur)",[550,593,594],{},"breyta hópmeðlimum",[550,596,597],{},"endurstilla lykilorð notenda",[550,599,600],{},"búa til og eyða notendum og hópum",[532,602,603],{},[538,604],{"alt":605,"src":606},"Permissions","https://res.cloudinary.com/c4a8/image/upload/v1770991330/blog/pics/Blog_-_Exchange_AD_Split_Permissions_-_2.png",[532,608,609],{},"Aðeins tilteknir Tier0 notendur og hópar með háar heimildir eru varðir af AdminSDHolder-ferlinu (attribute admincount=1), og í mörgum umhverfum eru óvarðir notendur eða hópar sem gætu gert kleift að taka yfir lénið og/eða skóginn, eða að minnsta kosti valdið alvarlegum skaða.",[527,611,613],{"id":612},"áberandi-dæmi","Áberandi dæmi:",[587,615,616,619,639],{},[550,617,618],{},"Entra Connect Sync reikningur þegar PWHashSync er notað",[550,620,621,622],{},"Sjálfgefnir hópar\n",[587,623,624,627,636],{},[550,625,626],{},"Allowed RODC Password Replication Group saman með EntraConnect reikningi (ef raunverulegt Windows RODC er til staðar)",[550,628,629,630,635],{},"Sjá einnig ",[554,631,634],{"href":632,"rel":633},"https://specterops.io/blog/2025/06/25/untrustworthy-trust-builders-account-operators-replicating-trust-attack-aorta/",[558],"Untrustworthy Trust Builders: Account Operators Replicating Trust Attack (AORTA) - SpecterOps"," sem sýnir fleiri leiðir (Account Operators hópurinn er sambærileg ógn)",[550,637,638],{},"Að tæma Protected Users til að búa til árásarleiðir með því að fjarlægja varnir",[550,640,641,642],{},"Óvarðir sérsniðnir hópar eða admin/þjónustureikningar\n",[587,643,644,647],{},[550,645,646],{},"Skrifheimildir á GPOs (sem beinast að domain controller)",[550,648,649],{},"Umsjón með aðgangi að AD backups, backup server, PKI templates, hypervisor, ...",[532,651,652,653,655,656,661,663,664],{},"Það er mjög erfitt að hefta afturvirkt allar þessar núverandi og framtíðar mögulegu leiðir. Fyrir sérsniðna _ADM OU væri hægt að slökkva á ACL-erfð, en flestir sjálfgefnir hlutir má ekki flytja úr sjálfgefinni Builtin OU eða Users container og verða áfram viðkvæmir.",[561,654],{},"\nMiklu betra er að fjarlægja þessar öflugu heimildir frá rótinni, sem er gert með því að innleiða Active Directory split permissions líkanið. ",[554,657,660],{"href":658,"rel":659},"https://learn.microsoft.com/en-us/exchange/permissions/split-permissions/configure-exchange-for-split-permissions",[558],"Configure Exchange Server for split permissions | Microsoft Learn",[561,662],{},"\nOg Microsoft tekur undir: „…encouraged to implement Active Directory split permissions\" ",[554,665,668],{"href":666,"rel":667},"https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/active-directory-hardening-series---part-7-%E2%80%93-implementing-least-privilege/4366626",[558],"Active Directory Hardening Series - Part 7 – Implementing Least Privilege | Microsoft Community Hub",[670,671,673],"h2",{"id":672},"en-af-hverju-gerir-þá-enginn-þetta","En af hverju gerir þá enginn þetta?",[532,675,676,677,679],{},"Þar sem split permissions voru ekki til fyrr en með Exchange 2010 SP1 höfðu allir þá þegar sætt sig við ástandið, og svo virðist sem security-teymum hafi ekki tekist að ýta á breytingar með góðum árangri eftir að valkosturinn varð til.",[561,678],{},"\nOg þetta hefði kallað á breytingar á admin- og IDM-ferlum, eins og að búa til notendur eða distribution lists fyrst í AD og nota Exchange aðeins eftir á til að „mail enable\" þá.",[532,681,682,683,685],{},"Cmdlets sem ekki eru lengur til staðar eða virka:",[561,684],{},[686,687,688],"code",{},"Add-DistributionGroupMember, New-DistributionGroup, New-Mailbox, New-MailContact, New-MailUser, New-RemoteMailbox, Remove-DistributionGroup, Remove-DistributionGroupMember, Remove-Mailbox, Remove-MailContact, Remove-MailUser, Remove-RemoteMailbox, Update-DistributionGroupMember, Add-ADPermission, Remove-ADPermission ",[527,690,692],{"id":691},"dæmi-um-aðlögun","Dæmi um aðlögun:",[587,694,695,706],{},[550,696,697,698],{},"New-Mailbox (þar sem Exchange skrifar í AD) yrði:\n",[587,699,700,703],{},[550,701,702],{},"New-ADUser (þar sem adm.jdoe skrifar í AD)",[550,704,705],{},"Enable-Mailbox",[550,707,708],{},"Add-ADPermission fyrir SendAs-réttindi þyrfti að framkvæma í gegnum AD users and computers í öryggisflipanum, og krefst oft viðbótarheimilda í AD fyrir venjulega stjórnendur.",[670,710,712],{"id":711},"sýndu-mér-þennan-valkost-án-eftirsjár","Sýndu mér þennan valkost án eftirsjár",[532,714,715,719],{},[716,717,718],"strong",{},"Fyrirvari",": Lestu og skildu eftirfarandi tengla og greinar til fulls, prófaðu fyrst í prófunarumhverfi, gakktu úr skugga um að AD backups séu uppfærð og að endurheimtarferlar séu til staðar.",[527,721,723],{"id":722},"skoðaðu-núverandi-notkun","Skoðaðu núverandi notkun",[532,725,726,729,731],{},[716,727,728],{},"Þú ættir fyrst að athuga hvaða af viðkomandi cmdlets eru í notkun á hvaða OUs.",[561,730],{},[686,732,733],{},"$CsvPath =\"C:\\temp\\SplitPermissionAdminAuditLog.csv\"",[532,735,736],{},[686,737,738],{},"$Cmdlets = \"Add-ADPermission\",\"Remove-ADPermission\",\"New-DistributionGroup\",\"Remove-DistributionGroup\",\"Add-DistributionGroupMember\",\"Update-DistributionGroupMember\",\"Remove-DistributionGroupMember\",\"New-Mailbox\",\"Remove-Mailbox\",\"New-RemoteMailbox\",\"Remove-RemoteMailbox\",\"New-MailUser\",\"Remove-MailUser\",\"New-MailContact\",\"Remove-MailContact\"",[532,740,741],{},[686,742,743],{},"Search-AdminAuditLog -ResultSize 99000 -Cmdlets $Cmdlets| select RunDate,Caller,ObjectModified,CmdletName,@{Name='CmdletParameters';Expression={[string]::join(\",\", ($_.CmdletParameters))}},succeeded,error | Export-Csv -Path $CsvPath -Delimiter \";\" -Encoding Unicode -NoTypeInformation",[532,745,746,749,751,754,757,760],{},[716,747,748],{},"Fljótleg greining á caller og cmdlets:",[561,750],{},[686,752,753],{},"$CSVs=Import-Csv -Path $CsvPath -Delimiter \";\"",[686,755,756],{},"$CSVs|group Caller",[686,758,759],{},"$CSVs|group CmdletName",[686,761,762],{},"Analyze the CSV for where AD permissions will be needed. Potentially optimize by moving all Exchange relevant groups into dedicated OUs.",[527,764,766],{"id":765},"virkjaðu-split-permissions-líkanið","Virkjaðu split permissions líkanið",[532,768,769,776,778,779,781,784,786,789,790],{},[716,770,771,772,775],{},"Fylgdu leiðbeiningum í „Switch to Active Directory split permissions\" í ",[554,773,660],{"href":556,"rel":774},[558]," (EKKI RBAC split permissions)",[561,777],{},"\nÍ meginatriðum fjarlægir þetta hættulegar heimildir hópsins „Exchange Windows Permissions\" og fjarlægir jafnframt Exchange sem meðlim í hópnum.",[561,780],{},[686,782,783],{},"Setup.exe /IAcceptExchangeServerLicenseTerms_DiagnosticDataOFF /PrepareAD /ActiveDirectorySplitPermissions:true",[561,785],{},[716,787,788],{},"Til að afturkalla notaðu einfaldlega:"," ",[686,791,792],{},"/ActiveDirectorySplitPermissions:false",[527,794,796],{"id":795},"veittu-ad-heimildir","Veittu AD-heimildir",[532,798,799,802,804,805,807,810,812,814],{},[716,800,801],{},"Búðu til sérsniðinn AD-hóp og gerðu Exchange servera að meðlimum.",[561,803],{},"\nstilltu OU Path fyrst.",[561,806],{},[686,808,809],{},"New-ADGroup -Name \"AD_Custom Exchange Split permissions replacement\" -GroupCategory Security -GroupScope DomainLocal -Path \"OU=Rights,OU=Groups,OU=T1,OU=_ADM,$((Get-ADDomain).DistinguishedName)\" -Description \"replaces the permissions lost by split permissions on relevant OUs\"",[561,811],{},[561,813],{},[686,815,816],{},"Add-ADGroupMember \"AD_Custom Exchange Split permissions replacement\" -Members \"Exchange Trusted Subsystem\"",[532,818,819,822,824],{},[716,820,821],{},"endurræstu Exchange servera svo heimildir í gegnum hópinn virki",[561,823],{},"\nÉg hef búið til skriptu til að auðvelda úthlutun AD-heimilda eftir notkunartilviki.",[826,827,828],"blockquote",{},[532,829,830,836,837,840],{},[716,831,832],{},[833,834,835],"em",{},"INFO:"," Án þessara heimilda fær Exchange server villuna ",[686,838,839],{},"„INSUFF_ACCESS_RIGHTS\""," frá AD.",[532,842,843,852,854],{},[716,844,845,846,851],{},"Sæktu ",[554,847,850],{"href":848,"rel":849},"https://github.com/glueckkanja/code-snippets/blob/main/ExchangeADSplitPermission/Add-ExchangeADSplitPermissionOnOU.ps1",[558],"Add-ExchangeADSplitPermissionOnOU.ps1"," frá glueckkanja GitHub",[561,853],{},"\nHún getur veitt eftirfarandi PermissionTypes:",[587,856,857,870,890,903],{},[550,858,859,862],{},[716,860,861],{},"CreateUserAndContact",[587,863,864,867],{},[550,865,866],{},"Create/delete, ResetPassword og WriteAllProperties fyrir Users og Contacts",[550,868,869],{},"Exchange cmdlets: New-Mailbox, New-RemoteMailbox, New-MailUser, New-MailContact og samsvarandi Remove-*",[550,871,872,875],{},[716,873,874],{},"GroupManage",[587,876,877,880,883],{},[550,878,879],{},"Create/Delete Groups, Modify Member",[550,881,882],{},"Exchange cmdlets: New-DistributionGroup, Remove-DistributionGroup, Add-DistributionGroupMember, Update-DistributionGroupMember, Remove-DistributionGroupMember",[550,884,885,886],{},"Viðbótarnotkun: notandi sem hefur umsjón með DistributionGroups sem hann á í gegnum https://",[887,888,889],"on-prem-exchange",{},"/EAC",[550,891,892,895],{},[716,893,894],{},"UserSendAs",[587,896,897,900],{},[550,898,899],{},"Modfiy AD Permissions on Users",[550,901,902],{},"Exchange cmdlet: Add-ADPermission",[550,904,905,908],{},[716,906,907],{},"GroupSendAs",[587,909,910,913],{},[550,911,912],{},"Modfiy AD Permissions on Groups",[550,914,902],{},[527,916,918],{"id":917},"hvernig-á-að-nota-skriptuna","Hvernig á að nota skriptuna:",[532,920,921],{},[686,922,923,789,926,789,932,789,935,789,940],{},[686,924,925],{},"Add-ExchangeADSplitPermissionOnOU.ps1 -TargetOU",[927,928,929],"b",{},[686,930,931],{},"\u003COU>",[686,933,934],{},"-PermissionType",[927,936,937],{},[686,938,939],{},"\u003CGroupManage|UserSendAs|GroupSendAs|CreateUserAndContact>",[686,941,942],{},"-Trustee \"AD_Custom Exchange Split permissions replacement",[532,944,945,946,948],{},"t.d.",[561,947],{},[686,949,950,789,953,789,957],{},[686,951,952],{},"Add-ExchangeADSplitPermissionOnOU.ps1 -TargetOU \"OU=ExchangeGroups,OU=HQ,OU=Alderaan,$((Get-ADDomain).DistinguishedName)\" -PermissionType",[927,954,955],{},[686,956,874],{},[686,958,959],{},"-Trustee \"AD_Custom Exchange Split permissions replacement\"",[532,961,962],{},[686,963,964,789,966,789,970],{},[686,965,952],{},[927,967,968],{},[686,969,907],{},[686,971,959],{},[532,973,974],{},[686,975,976,789,979,789,983],{},[686,977,978],{},"Add-ExchangeADSplitPermissionOnOU.ps1 -TargetOU \"OU=Users,OU=HQ,OU=Alderaan,$((Get-ADDomain).DistinguishedName)\" -PermissionType",[927,980,981],{},[686,982,894],{},[686,984,959],{},[532,986,987],{},[686,988,989],{},[686,990,991],{},"Add-ExchangeADSplitPermissionOnOU.ps1 -TargetOU \"OU=Users,OU=HQ,OU=Alderaan,$((Get-ADDomain).DistinguishedName)\" -PermissionType CreateUserAndContact -Trustee \"AD_Custom Exchange Split permissions replacement\"",[527,993,995],{"id":994},"veittu-exchange-rbac","Veittu Exchange RBAC",[532,997,998,1001,1003],{},[716,999,1000],{},"Endurvirkjaðu -BypassSecurityGroupManagerCheck færibreytu fyrir Add-DistributionGroupMember og Remove-DistributionGroupMember cmdlets:",[561,1002],{},[686,1004,1005],{},"New-RoleGroup -Name \"SplitPermission Security Group Creation and Membership\" -Roles \"Security Group Creation and Membership\" -Members \"Organization Management\",\"Recipient Management\" -Description \"Brings back -BypassSecurityGroupManagerCheck to Add-DistributionGroupMember, but also needs AD ACL for Exchange Server on target DLs\" ",[826,1007,1008],{},[532,1009,1010,789,1014,1016],{},[716,1011,1012],{},[833,1013,835],{},[561,1015],{},"Annars færðu „-BypassSecurityGroupManagerCheck parameter is not available\" eða „You don't have sufficient permissions. This operation can only be performed by a manager of the group\"",[532,1018,1019,1021,1024,1026],{},[561,1020],{},[716,1022,1023],{},"Endurvirkjaðu New-Mailbox, New-RemoteMailbox, New-MailContact, Remove-... cmdlets með nauðsynlegum færibreytum:",[561,1025],{},[686,1027,1028],{},"New-RoleGroup -Name \"SplitPermission Mail Recipient Creation\" -Roles \"Mail Recipient Creation\" -Members \"Organization Management\",\"Recipient Management\" -Description \"Brings back New-Mailbox, New-RemoteMailbox, New-MailUser, New-MailContact and matching Remove-... cmdlets, but additionally Exchange needs AD ACL for Exchange Server on target OUs\"",[670,1030,1032],{"id":1031},"samantekt","Samantekt",[532,1034,1035],{},"Ég vona að með þessum leiðbeiningum muni miklu fleiri stíga þetta mikilvæga skref til að verja Active Directory gegn compromise í gegnum Exchange. Ég hef ekki enn lent í neinum vandræðum þegar ég hef innleitt Exchange AD split permissions líkanið og aðlögunina úr þessari grein hjá viðskiptavinum okkar.",[532,1037,1038],{},"Ég vona að Microsoft muni innleiða innfædda leið til að ná þessari fínstillanlegu OU-byggðu nálgun, í stað núverandi allt-eða-ekkert, svo hún verði almennt tekin upp.",[532,1040,1041,1042,1047,1048,1053],{},"Þar sem AD Tiering er mér kært mál: að auki, ekki skrá þig inn á Exchange servera með Domain Admin (eða neinum Tier0) reikningum, heldur meðhöndlaðu þá sem Tier1 héðan í frá og innleiddu AD Tiering sem fyrst.\nSem fyrsta skref mæli ég með verkfærum eins og ",[554,1043,1046],{"href":1044,"rel":1045},"https://www.pingcastle.com/",[558],"PingCastle"," eða ",[554,1049,1052],{"href":1050,"rel":1051},"https://www.semperis.com/purple-knight/",[558],"Purple Knight"," til að meta öryggi og control paths í AD-inu þínu.",[1055,1056,1057],"style",{},"\ncode {\n  font-size: inherit\n}\n",{"title":1059,"searchDepth":1060,"depth":1060,"links":1061},"",2,[1062,1064,1065,1066,1067,1070,1077],{"id":529,"depth":1063,"text":530},3,{"id":544,"depth":1063,"text":545},{"id":578,"depth":1063,"text":579},{"id":612,"depth":1063,"text":613},{"id":672,"depth":1060,"text":673,"children":1068},[1069],{"id":691,"depth":1063,"text":692},{"id":711,"depth":1060,"text":712,"children":1071},[1072,1073,1074,1075,1076],{"id":722,"depth":1063,"text":723},{"id":765,"depth":1063,"text":766},{"id":795,"depth":1063,"text":796},{"id":917,"depth":1063,"text":918},{"id":994,"depth":1063,"text":995},{"id":1031,"depth":1060,"text":1032},"md","post",{"lang":1081,"seoTitle":1082,"titleClass":1083,"date":1084,"blogtitlepic":1085,"socialimg":1086,"customExcerpt":1087,"keywords":1088,"scripts":1089,"asideNav":1090,"maxContent":325,"published":484},"is","Exchange AD Split Permissions: Tryggðu Active Directory með least privilege","h2-font-size","2026-01-27","head-vulnerability-management","/blog/heads/head-vulnerability-management.jpg","On-Premises Exchange Server uppsetningar eru enn algengar, jafnvel hjá fyrirtækjum sem hafa flutt öll pósthólf í skýið. Þær hafa líka enn mikil völd innan Active Directory og því er oftast sterk árásarleið til að taka yfir allt AD, og með því yfirleitt stóran hluta af IT-umhverfi fyrirtækisins. Að skipta yfir í svokallaðar „AD Split permissions\" fjarlægir þessar mikilvægu heimildir, og ég hef þróað lausn sem tekur burt gallana sem hafa hingað til komið í veg fyrir að fyrirtæki tækju þetta upp.","Exchange Server, Active Directory, AD split permissions, RBAC, Exchange permissions, AdminSDHolder, least privilege, AD ACL, PowerShell",{"slick":325,"form":325},{"menuItems":1091},[1092,1094,1096,1098,1100],{"href":1093,"text":530},"#tldr-hvað-ef-við-fjarlægjum-gallana",{"href":1095,"text":579},"#af-hverju-skiptir-þetta-máli-núna",{"href":1097,"text":673},"#en-af-hverju-gerir-þá-enginn-þetta",{"href":1099,"text":712},"#sýndu-mér-þennan-valkost-án-eftirsjár",{"href":1101,"text":1032},"#samantekt","/posts/2026-01-27-exchange-active-directory",{"title":520,"description":1059},"posts/2026-01-27-exchange-active-directory","ByDQl0nXQUFkHxScMSVKkH1Y4qgQ1osRpUpw7kwfcFw",{"id":1107,"extension":1108,"meta":1109,"stem":8,"__hash__":1460},"authors_data/authors.json","json",{"path":1110,"Fritz Zurhorst":1111,"Alexander Schlindwein":1117,"Sophie Luna":1123,"Nadine Klein":1131,"Karsten Kleinschmidt":1137,"Julian Wendt":1145,"Holger Bunkradt":1150,"Ralf Mania":1156,"Oliver Kieselbach":1162,"Steffen Schwerdtfeger":1168,"Gunnar Winter":1176,"Jan Petersen":1181,"Thorsten Kunzi":1186,"Moritz Pohl":1190,"Thorben Pöschus":1195,"Christoph Hannebauer":1201,"Marco Scheel":1205,"Christopher Brumm":1210,"Florian Klante":1217,"Niklas Bachmann":1222,"Nils Krautkrämer":1227,"Patrick Treptau":1233,"Peter Beckendorf":1238,"Patrick Sobau":1243,"Jörg Wunderlich":1248,"Michael Breither":1252,"Christian Kanja":1257,"Zeba Hoffmann":1263,"Jochen Fröhlich":1268,"Jan Geisbauer":1272,"Gerrit Reinke":1284,"Christian Kordel":1290,"Stephan Wälde":1294,"Carolin Kanja":1299,"Adrian Ritter":1305,"Marvin Bangert":1310,"Thorsten Pickhan":1316,"Christian Lorenz":1322,"Denis Böhm":1327,"Fabian Bader":1332,"Juan Jose Fernandez Perez":1338,"Mahschid Sayyar":1343,"Benjamin Dassow":1348,"Markus Walschburger":1353,"Jonathan Haist":1358,"Daniel Rohregger":1363,"Thomas Naunheim":1368,"Florian Stöckl":1373,"Pascal Asch":1378,"Markus Kättner":1383,"Anna Ulbricht":1390,"Annette Brauns":1397,"body":1403,"title":1459},"/authors",{"display_name":1112,"avatar":1113,"permalink":1114,"linkedin":1115,"imageOffsetTop":1116},"Fritz Zurhorst","people/people-fritz-zurhorst.png","/authors/fritz-zurhorst","friedemann-z","72%",{"display_name":1118,"avatar":1119,"permalink":1120,"twitter":1121,"linkedin":1122},"Alexander Schlindwein","people/people-alexander-rudolph.png","/authors/alexander-schlindwein","AlexanderOnIT","schlindwein-alexander",{"display_name":1124,"avatar":1125,"permalink":1126,"twitter":1127,"linkedin":1128,"imageOffsetLeft":1129,"imageOffsetTop":1130},"Sophie Luna","people/people-sophie-luna.jpg","/authors/sophie-luna","glueckkanjagab","../company/glueckkanja-gab","58%","67%",{"display_name":1132,"avatar":1133,"permalink":1134,"twitter":1135,"linkedin":1136,"imageOffsetTop":1116},"Nadine Klein","people/people-nadine-kern.png","/authors/nadine-kern","nadineausRT","nadine-kern",{"display_name":1138,"avatar":1139,"permalink":1140,"twitter":1141,"linkedin":1142,"imageOffsetTop":1143,"imageOffsetLeft":1144},"Karsten Kleinschmidt","/c_pad,w_800,h_700/people/karsten-kleinschmidt.jpg","/authors/karsten-kleinschmidt","KarstenonIT","karstenkleinschmidt","60%","57%",{"display_name":1146,"avatar":1147,"permalink":1148,"linkedin":1149},"Julian Wendt","people/people-julian-wendt.png","/authors/julian-wendt","julian-wendt",{"display_name":1151,"avatar":1152,"permalink":1153,"linkedin":1154,"twitter":1155},"Holger Bunkradt","people/people-holger-bunkradt.png","/authors/holger-bunkradt","holger-bunkradt-12b5053b","hbunkradt",{"display_name":1157,"avatar":1158,"permalink":1159,"linkedin":1160,"twitter":1161},"Ralf Mania","people/people-ralf-mania.png","/authors/ralf-mania","ralf-mania-146a2757","RaMa1976",{"display_name":1163,"avatar":1164,"permalink":1165,"linkedin":1166,"twitter":1167},"Oliver Kieselbach","people/people-oliver-kieselbach.png","/authors/oliver-kieselbach","oliver-kieselbach-a4a3409","okieselbT",{"display_name":1169,"avatar":1170,"permalink":1171,"linkedin":1172,"twitter":1173,"imageOffsetTop":1174,"imageOffsetLeft":1175},"Steffen Schwerdtfeger","people/people-steffen-schwerdtfeger.png","/authors/steffen-schwerdtfeger","steffen-schwerdtfeger","SteffenAtCloud","79%","51%",{"display_name":1177,"avatar":1178,"permalink":1179,"twitter":1127,"linkedin":1180},"Gunnar Winter","people/people-gunnar-winter.jpg","/authors/gunnar-winter","company/glueckkanja-gab",{"display_name":1182,"avatar":1183,"permalink":1184,"twitter":1127,"linkedin":1185},"Jan Petersen","people/jan-petersen.png","/authors/jan-petersen","jan-petersen-26a901",{"display_name":1187,"avatar":1188,"permalink":1189,"twitter":1127,"linkedin":1180,"imageOffsetTop":1116},"Thorsten Kunzi","people/author-thorsten-kunzi.png","/authors/thorsten-kunzi",{"display_name":1191,"avatar":1192,"permalink":1193,"twitter":1127,"linkedin":1194},"Dr. Moritz Pohl","people/people-moritz-pohl.png","/authors/moritz-pohl","dr-moritz-pohl",{"display_name":1196,"avatar":1197,"permalink":1198,"twitter":1199,"linkedin":1200},"Thorben Pöschus","people/thorben.poeschus.png","/authors/thorben-poeschus","TPO901","thorben-pöschus-624693b7",{"display_name":1202,"avatar":1203,"permalink":1204,"twitter":1127,"linkedin":1180,"imageOffsetTop":1116},"Dr. Christoph Hannebauer","people/people-christoph-hannebauer.png","/authors/christoph-hannebauer",{"display_name":1206,"avatar":1207,"permalink":1208,"twitter":1209,"linkedin":1209},"Marco Scheel","people/people-marco-scheel.png","/authors/marco-scheel","marcoscheel",{"display_name":1211,"avatar":1212,"permalink":1213,"twitter":1214,"linkedin":1215,"imageOffsetTop":1216},"Christopher Brumm","people/people-christopher-brumm.jpg","/authors/christopher-brumm","cbrhh","christopherbrumm","66%",{"display_name":1218,"avatar":1219,"permalink":1220,"linkedin":1221,"twitter":1127},"Florian Klante","people/florian-klante.jpg","/authors/florian-klante","florian-klante-6031b31b",{"display_name":1223,"avatar":1224,"permalink":1225,"linkedin":1226,"twitter":1127},"Niklas Bachmann","people/niklas.bachmann.png","/authors/niklas-bachmann","niklas-bachmann-66a863158",{"display_name":1228,"avatar":1229,"permalink":1230,"twitter":1231,"linkedin":1232},"Nils Krautkrämer","people/nils-krautkraemer.png","/authors/nils-krautkraemer","KrauNils","nils-krautkrämer-8b04bb250",{"display_name":1234,"avatar":1235,"permalink":1236,"linkedin":1237,"twitter":1127},"Patrick Treptau","people/people-patrick-treptau.png","/authors/patrick-traptau","ptreptau",{"display_name":1239,"avatar":1240,"permalink":1241,"linkedin":1242,"twitter":1127,"imageOffsetTop":1116},"Peter Beckendorf","people/peter-beckendorf.png","/authors/peter-beckendorf","peter-beckendorf-29a239b1",{"display_name":1244,"avatar":1245,"permalink":1246,"linkedin":1247,"twitter":1127},"Patrick Sobau","people/patrick-sobau.png","/authors/patrick-sobau","patrick-sobau",{"display_name":1249,"avatar":1250,"permalink":1251,"twitter":1127},"Jörg Wunderlich","people/joerg-wunderlich.png","/authors/joerg-wunderlich",{"display_name":1253,"avatar":1254,"permalink":1255,"twitter":1127,"linkedin":1256},"Michael Breither","people/people-michael-breither.jpg","/authors/michael-breither","michaelbreither",{"display_name":1258,"avatar":1259,"permalink":1260,"twitter":1261,"linkedin":1262},"Christian Kanja","people/people-christian-kanja.png","/authors/christian-kanja","cekageka","christian-kanja",{"display_name":1264,"avatar":1265,"permalink":1266,"linkedin":1267,"twitter":1127},"Zeba Hoffmann","people/zeba-hoffmann.png","/authors/zeba-hoffmann","zebahoffmann",{"display_name":1269,"avatar":1270,"permalink":1271,"twitter":1127,"linkedin":1180},"Jochen Fröhlich","people/people-jochen-froehlich.png","/authors/jochen-froehlich",{"display_name":1273,"avatar":1274,"permalink":1275,"twitter":1276,"linkedin":1276,"imageOffsetTop":1116,"socials":1277},"Jan Geisbauer","people/people-jan-geisbauer-csoc.png","/authors/jan-geisbauer","JanGeisbauer",[1278,1281],{"text":1279,"href":1280},"Blog","https://emptydc.com",{"text":1282,"href":1283},"Podcast","https://hairlessinthecloud.com",{"display_name":1285,"avatar":1286,"permalink":1287,"twitter":1288,"linkedin":1289},"Gerrit Reinke","people/gerrit-reinke.png","/authors/gerrit-reinke","GLWRe","glwr",{"display_name":1291,"avatar":1292,"permalink":1293,"twitter":1127,"linkedin":1180},"Christian Kordel","people/christian-kordel.png","/authors/christian-kordel",{"display_name":1295,"avatar":1296,"permalink":1297,"twitter":1298,"linkedin":1180},"Stephan Wälde","people/people-stephan-waelde.png","/authors/stephan-waelde","stephanwaelde",{"display_name":1300,"avatar":1301,"permalink":1302,"twitter":1303,"linkedin":1304},"Carolin Kanja","people/people-carolin-kanja.jpg","/authors/carolin-kanja","fraukanja","carolin-kanja",{"display_name":1306,"avatar":1307,"permalink":1308,"twitter":1309,"linkedin":1309},"Adrian Ritter","people/people-adrian-ritter.png","/authors/adrian-ritter","adrianritter",{"display_name":1311,"avatar":1312,"permalink":1313,"twitter":1314,"linkedin":1315},"Marvin Bangert","people/people-marvin-bangert.png","/authors/marvin-bangert","marvinbangert","marvin-bangert",{"display_name":1317,"avatar":1318,"permalink":1319,"twitter":1320,"linkedin":1321},"Thorsten Pickhan","people/people-thorsten-pickhan.png","/authors/thorsten-pickhan","tpickhan","thorsten-pickhan",{"display_name":1323,"avatar":1324,"permalink":1325,"linkedin":1326,"twitter":1127},"Christian Lorenz","people/people-christian-lorenz.png","/authors/christian-lorenz","christianlorenz95",{"display_name":1328,"avatar":1329,"permalink":1330,"linkedin":1331,"twitter":1127},"Denis Böhm","people/people-denis-boehm.png","/authors/denis-boehm","denis-böhm-3bb834135",{"display_name":1333,"avatar":1334,"permalink":1335,"linkedin":1336,"twitter":1337},"Fabian Bader","people/people-fabian-bader.jpg","/authors/fabian-bader","fabianbader","fabian_bader",{"display_name":1339,"avatar":1340,"permalink":1341,"linkedin":1342},"Juan Jose Fernandez Perez","people/people-juan-jose-fernandez.jpg","/authors/juan-jose-fernandez-perez","juan-jose-fernandez-perez-8016055",{"display_name":1344,"avatar":1345,"permalink":1346,"linkedin":1347},"Mahschid Sayyar","people/people-mahschid-sayyar.jpg","/authors/mahschid-sayyar","mahschid-sayyar-97544463",{"display_name":1349,"avatar":1350,"permalink":1351,"linkedin":1352},"Benjamin Dassow","people/people-benjamin-dassow.jpg","/authors/benjamin-dassow","benjamin-dassow",{"display_name":1354,"avatar":1355,"permalink":1356,"linkedin":1357},"Markus Walschburger","people/people-markus-walschburger.jpg","/authors/markus-walschburger","markus-walschburger",{"display_name":1359,"avatar":1360,"permalink":1361,"linkedin":1362,"imageOffsetTop":1116},"Jonathan Haist","people/people-jonathan-haist.jpg","/authors/jonathan-haist","jonathanhaist",{"display_name":1364,"avatar":1365,"permalink":1366,"linkedin":1367,"imageOffsetTop":1116},"Daniel Rohregger","people/people-daniel-rohregger.jpg","/authors/daniel-rohregger","drohregger",{"display_name":1369,"avatar":1370,"permalink":1371,"linkedin":1372,"imageOffsetTop":1216},"Thomas Naunheim","people/people-thomas-naunheim.jpg","/authors/thomas-naunheim","thomasnaunheim",{"display_name":1374,"avatar":1375,"permalink":1376,"linkedin":1377,"imageOffsetTop":1216},"Florian Stöckl","people/people-florian-stoeckl.jpg","/authors/florian-stoeckl","florianstoeckl",{"display_name":1379,"avatar":1380,"permalink":1381,"linkedin":1382,"imageOffsetTop":1216},"Pascal Asch","people/Pascal.Asch.648.jpg","/authors/pascal-asch","pascal-asch",{"display_name":1384,"avatar":1385,"permalink":1386,"linkedin":1387,"imageOffsetTop":1388,"imageOffsetLeft":1389},"Markus Kättner","people/markus-kaettner.jpg","/authors/markus-kaettner","markus-kättner-b600119","62%","63%",{"display_name":1391,"avatar":1392,"permalink":1393,"linkedin":1394,"imageOffsetTop":1395,"imageOffsetLeft":1396},"Anna Ulbricht","people/anna-katharina.ulbricht-09.png","/authors/anna-ulbricht","anna-katharina-u-a67702199","70%","50%",{"display_name":1398,"avatar":1399,"permalink":1400,"linkedin":1401,"imageOffsetTop":1402,"imageOffsetLeft":1143},"Annette Brauns","people/Annette-Brauns-8.jpg","/authors/annette-brauns","annette-brauns","95%",{"Fritz Zurhorst":1404,"Alexander Schlindwein":1405,"Sophie Luna":1406,"Nadine Klein":1407,"Karsten Kleinschmidt":1408,"Julian Wendt":1409,"Holger Bunkradt":1410,"Ralf Mania":1411,"Oliver Kieselbach":1412,"Steffen Schwerdtfeger":1413,"Gunnar Winter":1414,"Jan Petersen":1415,"Thorsten Kunzi":1416,"Moritz Pohl":1417,"Thorben Pöschus":1418,"Christoph Hannebauer":1419,"Marco Scheel":1420,"Christopher Brumm":1421,"Florian Klante":1422,"Niklas Bachmann":1423,"Nils Krautkrämer":1424,"Patrick Treptau":1425,"Peter Beckendorf":1426,"Patrick Sobau":1427,"Jörg Wunderlich":1428,"Michael Breither":1429,"Christian Kanja":1430,"Zeba Hoffmann":1431,"Jochen Fröhlich":1432,"Jan Geisbauer":1433,"Gerrit Reinke":1437,"Christian Kordel":1438,"Stephan Wälde":1439,"Carolin Kanja":1440,"Adrian Ritter":1441,"Marvin Bangert":1442,"Thorsten Pickhan":1443,"Christian Lorenz":1444,"Denis Böhm":1445,"Fabian Bader":1446,"Juan Jose Fernandez Perez":1447,"Mahschid Sayyar":1448,"Benjamin Dassow":1449,"Markus Walschburger":1450,"Jonathan Haist":1451,"Daniel Rohregger":1452,"Thomas Naunheim":1453,"Florian Stöckl":1454,"Pascal Asch":1455,"Markus Kättner":1456,"Anna Ulbricht":1457,"Annette Brauns":1458},{"display_name":1112,"avatar":1113,"permalink":1114,"linkedin":1115,"imageOffsetTop":1116},{"display_name":1118,"avatar":1119,"permalink":1120,"twitter":1121,"linkedin":1122},{"display_name":1124,"avatar":1125,"permalink":1126,"twitter":1127,"linkedin":1128,"imageOffsetLeft":1129,"imageOffsetTop":1130},{"display_name":1132,"avatar":1133,"permalink":1134,"twitter":1135,"linkedin":1136,"imageOffsetTop":1116},{"display_name":1138,"avatar":1139,"permalink":1140,"twitter":1141,"linkedin":1142,"imageOffsetTop":1143,"imageOffsetLeft":1144},{"display_name":1146,"avatar":1147,"permalink":1148,"linkedin":1149},{"display_name":1151,"avatar":1152,"permalink":1153,"linkedin":1154,"twitter":1155},{"display_name":1157,"avatar":1158,"permalink":1159,"linkedin":1160,"twitter":1161},{"display_name":1163,"avatar":1164,"permalink":1165,"linkedin":1166,"twitter":1167},{"display_name":1169,"avatar":1170,"permalink":1171,"linkedin":1172,"twitter":1173,"imageOffsetTop":1174,"imageOffsetLeft":1175},{"display_name":1177,"avatar":1178,"permalink":1179,"twitter":1127,"linkedin":1180},{"display_name":1182,"avatar":1183,"permalink":1184,"twitter":1127,"linkedin":1185},{"display_name":1187,"avatar":1188,"permalink":1189,"twitter":1127,"linkedin":1180,"imageOffsetTop":1116},{"display_name":1191,"avatar":1192,"permalink":1193,"twitter":1127,"linkedin":1194},{"display_name":1196,"avatar":1197,"permalink":1198,"twitter":1199,"linkedin":1200},{"display_name":1202,"avatar":1203,"permalink":1204,"twitter":1127,"linkedin":1180,"imageOffsetTop":1116},{"display_name":1206,"avatar":1207,"permalink":1208,"twitter":1209,"linkedin":1209},{"display_name":1211,"avatar":1212,"permalink":1213,"twitter":1214,"linkedin":1215,"imageOffsetTop":1216},{"display_name":1218,"avatar":1219,"permalink":1220,"linkedin":1221,"twitter":1127},{"display_name":1223,"avatar":1224,"permalink":1225,"linkedin":1226,"twitter":1127},{"display_name":1228,"avatar":1229,"permalink":1230,"twitter":1231,"linkedin":1232},{"display_name":1234,"avatar":1235,"permalink":1236,"linkedin":1237,"twitter":1127},{"display_name":1239,"avatar":1240,"permalink":1241,"linkedin":1242,"twitter":1127,"imageOffsetTop":1116},{"display_name":1244,"avatar":1245,"permalink":1246,"linkedin":1247,"twitter":1127},{"display_name":1249,"avatar":1250,"permalink":1251,"twitter":1127},{"display_name":1253,"avatar":1254,"permalink":1255,"twitter":1127,"linkedin":1256},{"display_name":1258,"avatar":1259,"permalink":1260,"twitter":1261,"linkedin":1262},{"display_name":1264,"avatar":1265,"permalink":1266,"linkedin":1267,"twitter":1127},{"display_name":1269,"avatar":1270,"permalink":1271,"twitter":1127,"linkedin":1180},{"display_name":1273,"avatar":1274,"permalink":1275,"twitter":1276,"linkedin":1276,"imageOffsetTop":1116,"socials":1434},[1435,1436],{"text":1279,"href":1280},{"text":1282,"href":1283},{"display_name":1285,"avatar":1286,"permalink":1287,"twitter":1288,"linkedin":1289},{"display_name":1291,"avatar":1292,"permalink":1293,"twitter":1127,"linkedin":1180},{"display_name":1295,"avatar":1296,"permalink":1297,"twitter":1298,"linkedin":1180},{"display_name":1300,"avatar":1301,"permalink":1302,"twitter":1303,"linkedin":1304},{"display_name":1306,"avatar":1307,"permalink":1308,"twitter":1309,"linkedin":1309},{"display_name":1311,"avatar":1312,"permalink":1313,"twitter":1314,"linkedin":1315},{"display_name":1317,"avatar":1318,"permalink":1319,"twitter":1320,"linkedin":1321},{"display_name":1323,"avatar":1324,"permalink":1325,"linkedin":1326,"twitter":1127},{"display_name":1328,"avatar":1329,"permalink":1330,"linkedin":1331,"twitter":1127},{"display_name":1333,"avatar":1334,"permalink":1335,"linkedin":1336,"twitter":1337},{"display_name":1339,"avatar":1340,"permalink":1341,"linkedin":1342},{"display_name":1344,"avatar":1345,"permalink":1346,"linkedin":1347},{"display_name":1349,"avatar":1350,"permalink":1351,"linkedin":1352},{"display_name":1354,"avatar":1355,"permalink":1356,"linkedin":1357},{"display_name":1359,"avatar":1360,"permalink":1361,"linkedin":1362,"imageOffsetTop":1116},{"display_name":1364,"avatar":1365,"permalink":1366,"linkedin":1367,"imageOffsetTop":1116},{"display_name":1369,"avatar":1370,"permalink":1371,"linkedin":1372,"imageOffsetTop":1216},{"display_name":1374,"avatar":1375,"permalink":1376,"linkedin":1377,"imageOffsetTop":1216},{"display_name":1379,"avatar":1380,"permalink":1381,"linkedin":1382,"imageOffsetTop":1216},{"display_name":1384,"avatar":1385,"permalink":1386,"linkedin":1387,"imageOffsetTop":1388,"imageOffsetLeft":1389},{"display_name":1391,"avatar":1392,"permalink":1393,"linkedin":1394,"imageOffsetTop":1395,"imageOffsetLeft":1396},{"display_name":1398,"avatar":1399,"permalink":1400,"linkedin":1401,"imageOffsetTop":1402,"imageOffsetLeft":1143},"Authors","1csawlkJxRljy93GTOnXEkwLqAv9Lcj-apxRvoodAOY",{"list":1462,"authors":1678},[1463,1480,1494,1508,1524,1537,1550,1563,1575,1591,1605,1620,1638,1649,1662],{"id":1464,"title":1465,"author":1466,"cta":494,"description":1059,"hideInRecent":484,"layout":1079,"meta":1467,"moment":1472,"path":1473,"stem":1474,"tags":1475,"webcast":484},"content_is/posts/2026-09-22-end-of-mfa-sms.md","Endalok MFA-SMS",[1138],{"lang":1081,"date":1468,"categories":1469,"blogtitlepic":1470,"customExcerpt":1471},"2026-09-21",[235],"head-conditional-access.jpg","Hvers vegna fyrirtæki ættu núna að skipta yfir í phishing-resistant og sem mest lykilorðalausar innskráningaraðferðir.","2026-09-22","/posts/2026-09-22-end-of-mfa-sms","posts/2026-09-22-end-of-mfa-sms",[235,1476,1477,1478,1479],"Authentication","Microsoft Entra ID","MFA","Passkeys",{"id":1481,"title":1482,"author":1483,"cta":494,"description":1059,"hideInRecent":484,"layout":1079,"meta":1484,"moment":1468,"path":1488,"stem":1489,"tags":1490,"webcast":484},"content_is/posts/2026-09-21-clickfix-prevent-detect.md","ClickFix. Þegar notandinn er exploitið, og hvernig þú stöðvar það",[1112,1132],{"lang":1081,"date":1468,"categories":1485,"blogtitlepic":1486,"customExcerpt":1487},[235],"head-clickfix.jpg","ClickFix gerir notendur að sínum eigin árásaraðila: falsað CAPTCHA, eitt copy-paste, og skaðkóði keyrir í minninu án þess að neitt lendi á disknum. Hvernig Microsoft Defender greinir árásina, hvar greiningin rekst á takmörk og hvernig þú lokar glufunni með RunMRU-hunt og fjórum varnarlögum.","/posts/2026-09-21-clickfix-prevent-detect","posts/2026-09-21-clickfix-prevent-detect",[1491,1492,1493],"Defender","SOC","Endpoint Security",{"id":1495,"title":1496,"author":1497,"cta":494,"description":1059,"hideInRecent":484,"layout":1079,"meta":1498,"moment":1468,"path":1502,"stem":1503,"tags":1504,"webcast":484},"content_is/posts/2026-09-21-red-tenant-dark-tenant-cio.md","Admin og dagleg vinna á sömu tölvu? Game Over.",[1273],{"lang":1081,"date":1468,"categories":1499,"blogtitlepic":1500,"customExcerpt":1501},[235],"head-game-over-en.jpg","Hvers vegna einn tenant dugar ekki fyrir CIO, og hvers vegna sá seinni er sjaldan hugsaður með. Managed Red Tenant aðskilur stjórnsýsluvinnu frá office-umhverfinu með sjálfum arkitektúrnum, Managed Dark Tenant heldur fyrirtækinu starfhæfu þegar vörnin fellur samt. Hvað það þýðir fyrir rekstrarlíkanið, SOC-merkið og sönnunarskyldurnar samkvæmt NISG 2026.","/posts/2026-09-21-red-tenant-dark-tenant-cio","posts/2026-09-21-red-tenant-dark-tenant-cio",[235,1505,1506,1507],"Privileged Access","Zero Trust","NIS2",{"id":1509,"title":1510,"author":1511,"cta":494,"description":1512,"hideInRecent":484,"layout":1079,"meta":1513,"moment":1514,"path":1519,"stem":1520,"tags":1521,"webcast":484},"content_is/posts/2026-08-08-isg-germany-2026.md","Fjórum sinnum Leader. glueckkanja í ISG-rannsókninni Þýskaland 2026",[1300],"ISG endurnefndi rannsóknina sína í ár. Úr Microsoft Cloud Ecosystem varð Microsoft AI and Cloud Ecosystem, og með nafninu hefur mælikvarðinn færst til: metið er ekki lengur hver innleiðir Microsoft-vettvanga, heldur hver rekur Copilot, agenta og AI-workload með stýranlegum hætti. Nýi mælikvarðinn hefur engu breytt um stöðu okkar. ISG Provider Lens® rannsóknin Þýskaland 2026 staðsetur okkur sem Leader í fjórum fjórðungum: Microsoft Productivity and Business Process Services og Azure Managed Services, hvorum tveggja á large market og mid market. Eftir 2021, 2023, 2024 og 2025 er þetta fimmta Leader-flokkunin í Þýskalandi, í Sviss kom stökkið inn í Leader-fjórðunginn tveimur vikum fyrr.",{"lang":1081,"date":1514,"categories":1515,"blogtitlepic":1517,"customExcerpt":1518},"2026-08-08",[1516],"Corporate","head-isg-de-2026.png","ISG Provider Lens® rannsóknin 2026 staðsetur glueckkanja í Þýskalandi sem Leader í fjórum fjórðungum: Microsoft Productivity and Business Process Services og Azure Managed Services, hvorum tveggja á large og mid market. Rannsóknin heitir nú Microsoft AI and Cloud Ecosystem, og mælikvarðinn hefur færst til: metið er hver rekur AI- og agent-workload með stýranlegum hætti.","/posts/2026-08-08-isg-germany-2026","posts/2026-08-08-isg-germany-2026",[1522,1523],"Award","ISG",{"id":1525,"title":1526,"author":1527,"cta":494,"description":1528,"hideInRecent":484,"layout":1079,"meta":1529,"moment":1530,"path":1534,"stem":1535,"tags":1536,"webcast":484},"content_is/posts/2026-07-31-isg-switzerland-2026.md","Úr Rising Star í Leader. glueckkanja í ISG-rannsókninni Sviss 2026",[1300],"Árið 2024 stofnuðum við glueckkanja Switzerland AG og fluttum inn í skrifstofu í zentroom við Bahnhofplatz 10b í Bern. Árið 2025 flokkaði ISG okkur sem Rising Star á svissneska markaðnum, sem þann þjónustuaðila sem greinendurnir treysta til að stökkva inn í Leader-fjórðunginn. Nú er stökkið skjalfest: ISG Provider Lens® rannsóknin 2026 staðsetur okkur í Sviss sem Leader í fjórðungnum Microsoft AI and Cloud Ecosystem, á sviðunum Azure Managed Services og Microsoft Productivity and Business Process Services.",{"lang":1081,"date":1530,"categories":1531,"blogtitlepic":1532,"customExcerpt":1533},"2026-07-31",[1516],"head-isg-ch-2026.png","ISG Provider Lens® rannsóknin 2026 staðsetur glueckkanja í Sviss sem Leader í fjórðungnum Microsoft AI and Cloud Ecosystem, á sviðunum Azure Managed Services og Microsoft Productivity and Business Process Services. Tveimur árum eftir innkomuna á markaðinn í Bern, ári eftir Rising-Star-viðurkenninguna.","/posts/2026-07-31-isg-switzerland-2026","posts/2026-07-31-isg-switzerland-2026",[1522,1523],{"id":1538,"title":1539,"author":1540,"cta":494,"description":1059,"hideInRecent":484,"layout":1079,"meta":1541,"moment":1542,"path":1546,"stem":1547,"tags":1548,"webcast":484},"content_is/posts/2026-07-24-outbreak-openai-hugging-face.md","Outbreak. Hvað OpenAI/Hugging-Face-atvikið segir og hvað ekki",[1273],{"lang":1081,"date":1542,"categories":1543,"blogtitlepic":1544,"customExcerpt":1545},"2026-07-24",[235],"head-outbreak.jpg","AI-agent brýst út úr prófunarumhverfinu sínu, finnur zero-day og hakkar annað fyrirtæki. Hljómar eins og handrit, en gerðist í raun í júlí 2026. Tími fyrir yfirvegaða greiningu: með dálítilli sálfræði, tveimur security-veteranum og spurningunni um hvað þetta þýðir fyrir vörnina þína.","/posts/2026-07-24-outbreak-openai-hugging-face","posts/2026-07-24-outbreak-openai-hugging-face",[1549,1492,1506],"AI",{"id":1551,"title":1552,"author":1553,"cta":494,"description":1554,"hideInRecent":484,"layout":1079,"meta":1555,"moment":1556,"path":1560,"stem":1561,"tags":1562,"webcast":484},"content_is/posts/2026-07-22-isg-cybersecurity-2026.md","Leader og Rising Star. glueckkanja í ISG Cybersecurity-rannsókninni 2026",[1300],"Nýir í fjórðungnum og strax Leader: ISG Provider Lens®-rannsóknin \"Cybersecurity – Services and Solutions 2026\" staðsetur glueckkanja sem Leader á sviði Next-Gen SOC/MDR Services fyrir þýsk millistór fyrirtæki. Á heildarmarkaðnum fyrir Next-Gen SOC/MDR Services útnefnir ISG okkur Rising Star, það er þann þjónustuaðila sem greinendurnir treysta til að stökkva inn í Leader-fjórðunginn á næstu 12 til 24 mánuðum.",{"lang":1081,"date":1556,"categories":1557,"blogtitlepic":1558,"customExcerpt":1559},"2026-07-22",[1516],"head-isg-cybersecurity-2026.png","ISG Provider Lens®-rannsóknin Cybersecurity 2026 útnefnir glueckkanja Leader í fjórðungnum Next-Gen SOC/MDR Services (Midmarket). Á heildarmarkaðnum fyrir Next-Gen SOC/MDR Services erum við Rising Star. ISG staðfestir hjá okkur vöxt umfram meðaltal, djúpa Microsoft-security-sérþekkingu og SOC sem gengur allan sólarhringinn frá Þýskalandi.","/posts/2026-07-22-isg-cybersecurity-2026","posts/2026-07-22-isg-cybersecurity-2026",[1522,1523,235],{"id":1564,"title":1565,"author":1566,"cta":494,"description":1567,"hideInRecent":484,"layout":1079,"meta":1568,"moment":1569,"path":1572,"stem":1573,"tags":1574,"webcast":484},"content_is/posts/2026-07-06-the-holy-trinity.md","The Holy Trinity: hvað AI þarf í raun til að vinna",[1300],"Framleiðslufyrirtæki vill vita hverjar af 14.000 SKU-um þess séu í raun arðbærar. Svarið liggur í þremur kerfum sem hafa aldrei skipst á einum einasta gagnapunkti. Fram til skamms tíma kostaði það þrjár deildir, tvær vikur og talsverðan góðvilja að fá það. Frá byrjun árs 2026 getur AI svarað þessari spurningu á mínútum: farið yfir gögnin, dregið fram samhengið, framkallað tillögu. Að því gefnu að hún hafi aðgang.",{"lang":1081,"date":1569,"categories":1570,"blogtitlepic":1571},"2026-07-06",[131],"head-the-holy-trinity","/posts/2026-07-06-the-holy-trinity","posts/2026-07-06-the-holy-trinity",[1549,131],{"id":1576,"title":1577,"author":1578,"cta":494,"description":1579,"hideInRecent":484,"layout":1079,"meta":1580,"moment":1581,"path":1585,"stem":1586,"tags":1587,"webcast":484},"content_is/posts/2026-07-01-onboarding-process.md","Samningurinn undirritaður: svona fer onboardingið hjá okkur fram",[1391],"Hvernig fer onboardingið hjá ykkur eiginlega fram? Þetta er spurning sem mætir okkur aftur og aftur í samtölum við umsækjendur, því margir hafa upplifað að onboarding gangi brösuglega. Þeim mun meira máli skiptir okkur að þú hafir góða tilfinningu fyrir þessu frá byrjun.",{"lang":1081,"date":1581,"categories":1582,"blogtitlepic":1583,"customExcerpt":1584},"2026-07-01",[1516],"Onboarding_Blogheader","Samningurinn er undirritaður, fyrsta stóra skrefið er að baki. En hvað gerist næst? Við tökum þig með á bak við tjöldin í onboardinginu okkar, frá PreBoarding að fyrstu vikunni í teyminu.","/posts/2026-07-01-onboarding-process","posts/2026-07-01-onboarding-process",[1588,1589,1590],"Employer Branding","Onboarding","Unternehmenskultur",{"id":1592,"title":1593,"author":1594,"cta":494,"description":1595,"hideInRecent":484,"layout":1079,"meta":1596,"moment":1597,"path":1601,"stem":1602,"tags":1603,"webcast":484},"content_is/posts/2026-06-26-frontier-partner.md","Microsoft Frontier Partner: við tilheyrum hópnum",[1300],"Í Microsoft-partner-vistkerfinu er til heil röð af viðurkenningum, og samt sker Frontier Partner Badge sig úr í uppbyggingu sinni frá hinum. Ekki er hægt að sækja um það, heldur er það veitt að frumkvæði Microsoft til þröngs, útvalins hóps samstarfsaðila sem verða að sannfæra í mörgum greinum samhliða, í stað þess að skína í einni. Microsoft prófar þarna sönnuða hæfni í Cloud & AI Platforms, í AI Business Solutions og í Security jafnt og beinir sér þannig að fyrirtækjum sem líta ekki á AI sem viðbót ofan á núverandi IT, heldur sem afrakstur samfelldrar arkitektúrs sem ber allt frá auðkenni yfir endapunktinn og inn í framleiðslurekstur AI.",{"lang":1081,"date":1597,"categories":1598,"blogtitlepic":1599,"customExcerpt":1600},"2026-06-26",[1516],"head-frontier-partner-badge.jpg","Nýlega bættist við Microsoft AI Cloud Partner Program ný toppviðurkenning, Frontier Partner Badge. Microsoft veitir hana aðeins þröngum, útvöldum hópi samstarfsaðila um allan heim, þeim sem afhenda AI-verkefni á öllum Microsoft-stackinum á traustan hátt, allt frá vinnustaðnum yfir cloud-vettvanginn og security og inn í AI-forritin sjálf, og hafa sannað þessa kröfu í raunverulegum verkefnum. Á DACH-svæðinu telur þessi hópur aðeins örfá fyrirtæki, og við erum eitt þeirra.","/posts/2026-06-26-frontier-partner","posts/2026-06-26-frontier-partner",[1522,1604,1549],"Microsoft Partner",{"id":1606,"title":1607,"author":1608,"cta":494,"description":1609,"hideInRecent":484,"layout":1079,"meta":1610,"moment":1611,"path":1615,"stem":1616,"tags":1617,"webcast":484},"content_is/posts/2026-06-09-vair-run.md","160 kílómetrar fyrir góðan málstað",[1398],"Sunnudagsmorgunn, klukkan 8:30, Holbeinsteg við Main. Ellefu samstarfsmenn í samræmdum NinjaCat-bolum, tilbúnir í Frankfurter Runden. Regn, eldingar og þrumur með í kaupbæti. Það að hlaupa fyrir góðan málstað var næg hvatning til að reima á sig hlaupaskóna þrátt fyrir slæmt veður.",{"lang":1081,"date":1611,"categories":1612,"blogtitlepic":1613,"customExcerpt":1614},"2026-06-08",[1516],"frankfurter-runden.png","Ellefu samstarfsmenn, 16 hringir, 160 kílómetrar, þrumuveður og verðlaunasæti: glueckkanja tók þátt í Frankfurter Runden 2026 og gaf fyrir hvern hlaupinn hring til VAIR e.V., sem er að byggja upp opinn íþrótta- og menningargarð í Offenbach.","/posts/2026-06-09-vair-run","posts/2026-06-09-vair-run",[1618,1588,1619],"Top Arbeitgeber","Soziales Engagement",{"id":1621,"title":1622,"author":1623,"cta":494,"description":1624,"hideInRecent":484,"layout":1079,"meta":1625,"moment":1626,"path":1630,"stem":1631,"tags":1632,"webcast":484},"content_is/posts/2026-04-10-incident-to-intelligence.md","Anatómía á óþekktum AMOS Stealer: Frá alerti til ónæmis á klukkustundum",[1379],"Þegar alert kviknar í SOC-inu okkar byrjar klukkan að tifa, ekki bara fyrir viðkomandi viðskiptavin heldur fyrir öll fyrirtæki undir vernd okkar. Hættulegasta augnablikið í nútíma threat-umhverfi er intelligence gap-ið, tímaglugginn milli fyrstu notkunar á nýju malware-afbrigði og þess dags þegar iðnaðurinn heyrir af því.",{"lang":1081,"date":1626,"categories":1627,"blogtitlepic":1628,"customExcerpt":1629},"2026-04-10",[235],"head-amos-stealer.png","Áður óskráð afbrigði af AMOS stealer komst inn á macOS-endpoint. Engir þekktir hash-ar, engin C2-gögn í opnum gagnagrunnum. SOC-teymið okkar tók í sundur sex lög af obfuskun, dró út alla indicators og dreifði vörn til allra SOC-viðskiptavina á fáum klukkustundum, áður en iðnaðurinn hafði yfirhöfuð séð sample-ið.","/posts/2026-04-10-incident-to-intelligence","posts/2026-04-10-incident-to-intelligence",[1633,1634,1635,1636,1637],"Threat Intelligence","Incident Response","macOS Security","Malware Analysis","Cyber Security Operations Center",{"id":1639,"title":1640,"author":1641,"cta":494,"description":1642,"hideInRecent":484,"layout":1079,"meta":1643,"moment":1644,"path":1647,"stem":1648,"tags":494,"webcast":484},"content_is/posts/2026-03-21-microsoft-edge-corporate-browser.md","Af hverju Edge ætti að vera eini corporate browserinn þinn",[1169],"Val á browser er stefnumótandi ákvörðun í fyrirtækjaumhverfi, því það hefur bein áhrif á það hversu mikið öryggi og hversu mikla umsýslu þú færð í raun. Google Chrome var lengi augljósi kosturinn, en Microsoft Edge hefur þróast í browser sem grípur beint inn í þann stack sem er þegar til staðar, sérstaklega þegar Microsoft 365 er í notkun og umsýslan fer fram í gegnum Intune.",{"lang":1081,"date":1644,"blogtitlepic":1645,"customExcerpt":1646},"2026-03-21","head-microsoft-edge-default-browser.jpg","Ekkert fyrirtæki valdi Chrome í raun; hann var einfaldlega til staðar, með sinni eigin sync-rökfræði, sinni eigin reikningsstjórnun, sínu eigin viðmóti fyrir stefnur. Microsoft Edge grípur aftur á móti beint inn í þá innviði sem eru hvort eð er í rekstri: Entra ID, Intune, Defender. Þessi grein sýnir hvernig skiptin líta út, hvernig Chrome er vísað á landing page í gegnum Intune-stefnu og hvað fellur burt þegar hætt er að reka tvo browsera samhliða.","/posts/2026-03-21-microsoft-edge-corporate-browser","posts/2026-03-21-microsoft-edge-corporate-browser",{"id":1650,"title":1651,"author":1652,"cta":494,"description":1653,"hideInRecent":484,"layout":1079,"meta":1654,"moment":1655,"path":1659,"stem":1660,"tags":1661,"webcast":484},"content_is/posts/2026-03-20-stryker-attack-intune-privilege.md","Einn admin-aðgangur var allt sem þurfti.",[1273],"Miðvikudagur, 11. mars 2026. Starfsmenn á Stryker-skrifstofum í 79 löndum kveiktu á tölvunum sínum og fundu þær tómar. Innskráningarskjáir voru komnir í stað lógós. Fyrirtækjafartölvur, vinnusímar, einkatæki sem skráð voru í BYOD-áætlun fyrirtækisins, öllu var eytt samtímis, yfir nótt. Engin ransomware, engar malware-undirskriftir, ekkert sem endpoint-detection tól hefði getað greint.",{"lang":1081,"date":1655,"categories":1656,"blogtitlepic":1657,"customExcerpt":1658},"2026-03-20",[235],"head-stryker.jpg","Þann 11. mars 2026 eyddi Handala tækjum í 79 löndum, og allt sem til þess þurfti var eitt yfirtekið Intune admin-aðgangur. Engin malware, ekkert exploit, aðeins löglegar management-tólar sem beint var að eigendum sínum. Hvað gerðist, af hverju það heppnaðist og hvaða tvær arkitektúrlegar glufur þarf að loka.","/posts/2026-03-20-stryker-attack-intune-privilege","posts/2026-03-20-stryker-attack-intune-privilege",[71,1505,1506],{"id":1663,"title":1664,"author":1665,"cta":494,"description":1666,"hideInRecent":484,"layout":1079,"meta":1667,"moment":1668,"path":1672,"stem":1673,"tags":1674,"webcast":484},"content_is/posts/2026-03-16-ai-agent-hackathon.md","Sex agents. Fjórar vikur. Raunverulegur rekstur.",[1300],"Hversu margar klukkustundir eyðir IT-deildin þín á viku í verkefni sem agent gæti klárað á mínútum.",{"lang":1081,"date":1668,"categories":1669,"blogtitlepic":1670,"customExcerpt":1671},"2026-03-16",[1516],"head-ai-agent-hackathon.jpg","Sex fyrirtæki, fjögurra vikna build-fasi, sex virkir AI Agents, þetta var fyrsti glueckkanja AI Agent Hackathon. Kiekert, Dr. Oetker, Eckes-Granini, igefa og lila logistik byggðu í Copilot Studio agents sem eru í rekstri í dag. Það sem varð til og hvernig formið virkar.","/posts/2026-03-16-ai-agent-hackathon","posts/2026-03-16-ai-agent-hackathon",[1549,1675,1676,1677],"Copilot Studio","Hackathon","AI Agents",{"Karsten Kleinschmidt":1679,"Fritz Zurhorst":1680,"Nadine Klein":1681,"Jan Geisbauer":1682,"Carolin Kanja":1686,"Anna Ulbricht":1687,"Annette Brauns":1688,"Pascal Asch":1689,"Steffen Schwerdtfeger":1690},{"display_name":1138,"avatar":1139,"permalink":1140,"twitter":1141,"linkedin":1142,"imageOffsetTop":1143,"imageOffsetLeft":1144},{"display_name":1112,"avatar":1113,"permalink":1114,"linkedin":1115,"imageOffsetTop":1116},{"display_name":1132,"avatar":1133,"permalink":1134,"twitter":1135,"linkedin":1136,"imageOffsetTop":1116},{"display_name":1273,"avatar":1274,"permalink":1275,"twitter":1276,"linkedin":1276,"imageOffsetTop":1116,"socials":1683},[1684,1685],{"text":1279,"href":1280},{"text":1282,"href":1283},{"display_name":1300,"avatar":1301,"permalink":1302,"twitter":1303,"linkedin":1304},{"display_name":1391,"avatar":1392,"permalink":1393,"linkedin":1394,"imageOffsetTop":1395,"imageOffsetLeft":1396},{"display_name":1398,"avatar":1399,"permalink":1400,"linkedin":1401,"imageOffsetTop":1402,"imageOffsetLeft":1143},{"display_name":1379,"avatar":1380,"permalink":1381,"linkedin":1382,"imageOffsetTop":1216},{"display_name":1169,"avatar":1170,"permalink":1171,"linkedin":1172,"twitter":1173,"imageOffsetTop":1174,"imageOffsetLeft":1175},{"id":1107,"extension":1108,"meta":1692,"stem":8,"__hash__":1460},{},1791383931105]