[{"data":1,"prerenderedAt":1813},["ShallowReactive",2],{"sc:header-data-ja":3,"sc:footer-data-ja":489,"post-ja--posts-2026-03-01-exchange-ad-split-permissions-hardening-d948cda78b15d":519,"authors_data":1225,"content-ja-list-7b291c2dd91a4":1579,"authors_data:Thorsten Kunzi":1810},{"lang":4,"home":5,"navigation":17,"meta":479,"contact":485},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"ja":13},{"title":14,"url":15,"alt":16},"ホーム","/ja","glueckkanja Logo",[18,127,231,316,395,402],{"name":19,"languages":20,"children":24},"workplace",{"ja":21},{"title":22,"description":23},"Workplace","Microsoft 365を基盤に、スマートで安全な、柔軟性の高いワークプレイスを実現します。最新のテクノロジーとアイデンティティサービスが一つにつながります。",[25,55,91],{"name":26,"languages":27,"children":30},"portfolio",{"ja":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"ja":34},{"title":35,"url":36},"Managed Intune","/ja/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"ja":40},{"title":41,"url":42},"Managed Entra","/ja/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"ja":46},{"title":47,"url":48},"Managed Workplace","/ja/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"ja":52},{"title":53,"url":54},"Consulting Services","/ja/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"ja":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,85],{"name":62,"languages":63},"microsoft-entra-suite",{"ja":64},{"title":65,"url":66},"Microsoft Entra Suite","/ja/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"ja":70},{"title":71,"url":72},"Microsoft Intune","/ja/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"ja":76},{"title":77,"url":78},"Microsoft Windows","/ja/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{"ja":82},{"title":83,"url":84},"Windows 365 Cloud PC","/ja/workplace/windows365-cloud-pc",{"name":86,"languages":87},"cloud-workplace-foundation",{"ja":88},{"title":89,"url":90},"Cloud Workplace Foundation","/ja/workplace/cloud-workplace-foundation",{"name":92,"languages":93,"children":96},"microsoft-365-collaboration",{"ja":94},{"title":95},"Microsoft 365 Collaboration",[97,103,109,115,121],{"name":98,"languages":99},"microsoft-copilot",{"ja":100},{"title":101,"url":102},"Microsoft 365 Copilot","/ja/workplace/microsoft-365-copilot",{"name":104,"languages":105},"microsoft-teams",{"ja":106},{"title":107,"url":108},"Teams","/ja/workplace/microsoft-teams",{"name":110,"languages":111},"sharepoint-powerplatform",{"ja":112},{"title":113,"url":114},"SharePoint & Power Platform","/ja/workplace/sharepoint-power-platform",{"name":116,"languages":117},"exchange-online",{"ja":118},{"title":119,"url":120},"Exchange Online","/ja/workplace/exchange-online",{"name":122,"languages":123},"information-protection-compliance",{"ja":124},{"title":125,"url":126},"Information Protection & Compliance","/ja/workplace/information-protection-compliance",{"name":128,"languages":129,"children":133},"azure",{"ja":130},{"title":131,"description":132},"Azure","Azureで成長を後押しします。IaaSとPaaSによって、クラウドのコストを下げ、効率を高め、イノベーションを進めます。",[134,151,181],{"name":135,"languages":136,"children":138},"azure-portfolio",{"ja":137},{"title":29},[139,145],{"name":140,"languages":141},"azure-managed-services",{"ja":142},{"title":143,"url":144},"Azure Managed Services","/ja/azure/azure-managed-services",{"name":146,"languages":147},"azure-consulting",{"ja":148},{"title":149,"url":150},"Azure Consulting","/ja/azure/azure-consulting",{"name":152,"languages":153,"children":156},"azure-scenarios",{"ja":154},{"title":155},"シナリオ",[157,163,169,175],{"name":158,"languages":159},"plan-your-cloud",{"ja":160},{"title":161,"url":162},"クラウドを計画する","/ja/azure/plan-your-cloud",{"name":164,"languages":165},"migrate-to-the-cloud",{"ja":166},{"title":167,"url":168},"クラウドへ移行する","/ja/azure/migrate-to-the-cloud",{"name":170,"languages":171},"innovate-your-business",{"ja":172},{"title":173,"url":174},"ビジネスを刷新する","/ja/azure/innovate-your-business",{"name":176,"languages":177},"vmware-exit",{"ja":178},{"title":179,"url":180},"VMware戦略を立て直す","/ja/azure/vmware-exit",{"name":182,"languages":183,"children":186},"azure-practices",{"ja":184},{"title":185},"Practices",[187,193,199,202,208,213,219,225],{"name":188,"languages":189},"azure-foundation",{"ja":190},{"title":191,"url":192},"Azure Foundation","/ja/azure/azure-foundation",{"name":194,"languages":195},"azure-ai-foundation",{"ja":196},{"title":197,"url":198},"Azure AI Foundation","/ja/azure/azure-ai-foundation",{"name":86,"languages":200},{"ja":201},{"title":89,"url":90},{"name":203,"languages":204},"azure-data-foundation",{"ja":205},{"title":206,"url":207},"Azure Data Foundation","/ja/azure/azure-data-foundation",{"name":188,"languages":209},{"ja":210},{"title":211,"url":212},"Azure Container Foundation","/ja/azure/azure-container-foundation",{"name":214,"languages":215},"dark-tenant",{"ja":216},{"title":217,"url":218},"Managed Dark Tenant","/ja/azure/managed-dark-tenant",{"name":220,"languages":221},"azure-cloud-adoption-framework",{"ja":222},{"title":223,"url":224},"Cloud Adoption Framework","/ja/azure/cloud-adoption-framework",{"name":226,"languages":227},"azure-cloud-competence-center",{"ja":228},{"title":229,"url":230},"Cloud Competence Center","/ja/azure/cloud-competence-center",{"name":232,"languages":233,"children":242},"security",{"ja":234},{"title":235,"description":236,"emergency":237},"Security","受賞歴のある24時間365日のManaged Service、インシデント対応、最新水準の保護で、クラウドの安全を見守り、インフラを守ります。",{"text":238,"href":239,"skin":240,"icon":241},"サイバー攻撃の渦中ですか？","/ja/security/are-you-under-attack","primary","emergency",[243,268,289],{"name":244,"children":245},"security-security-consulting",[246,252,256,262],{"name":247,"languages":248},"managed-red-tenant",{"ja":249},{"title":250,"url":251},"Managed Red Tenant","/ja/security/managed-red-tenant",{"name":214,"languages":253},{"ja":254},{"title":255,"url":218},"Dark Tenant",{"name":257,"languages":258},"sentinel-data-lake",{"ja":259},{"title":260,"url":261},"Sentinel Data Lake","/ja/security/sentinel-data-lake",{"name":263,"languages":264},"security-consulting",{"ja":265},{"title":266,"url":267},"Security Consulting","/ja/security/security-consulting",{"name":269,"children":270},"security-cloud-security-operations-center",[271,277,283],{"name":272,"languages":273},"cloud-security-operations-center",{"ja":274},{"title":275,"url":276},"Cloud Security Operations Center","/ja/security/cloud-security-operations-center",{"name":278,"languages":279},"global-secure-access",{"ja":280},{"title":281,"url":282},"Global Secure Access","/ja/security/global-secure-access",{"name":284,"languages":285},"my-work-id",{"ja":286},{"title":287,"url":288},"MyWorkID","/ja/security/my-work-id",{"name":290,"children":291},"security-preventive-services",[292,298,304,310],{"name":293,"languages":294},"preventive-services",{"ja":295},{"title":296,"url":297},"Preventive Services","/ja/security/preventive-services",{"name":299,"languages":300},"data-security-services",{"ja":301},{"title":302,"url":303},"Data Security Service","/ja/security/data-security-service",{"name":305,"languages":306},"security-copilot-agents",{"ja":307},{"title":308,"url":309},"Security Copilot Agents","/ja/security/security-copilot-agents",{"name":311,"languages":312},"nis2",{"ja":313},{"title":314,"url":315},"NIS2を技術で実装する","/ja/security/red-dark-tenant-nis2",{"name":317,"languages":318,"children":322},"products",{"ja":319},{"title":320,"description":321},"製品","完全に安全で100%クラウドネイティブなMicrosoft環境のためのCompanion製品です。協働、ネットワーク認証、ソフトウェア管理を強化します。",[323,360],{"name":324,"products":325,"children":326},"lorem ipsum 1",true,[327,336,344,352],{"name":328,"img":329,"target":330,"languages":331},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"ja":332},{"title":333,"url":334,"subtitle":335},"RealmJoin","https://www.realmjoin.com","クラウドベースのソフトウェア配布",{"name":337,"img":338,"target":330,"languages":339},"scepman","products/scepman/scepman-nav-logo.svg",{"ja":340},{"title":341,"url":342,"subtitle":343},"SCEPman","https://www.scepman.com","クラウドからの証明書配布",{"name":345,"img":346,"target":330,"languages":347},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"ja":348},{"title":349,"url":350,"subtitle":351},"KONNEKT","https://www.konnekt.io","Office 365のデータをローカルで利用",{"name":353,"img":354,"target":330,"languages":355},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"ja":356},{"title":357,"url":358,"subtitle":359},"RealMigrator","https://www.realmigrator.com","サーバー間のデータ移行",{"name":361,"products":325,"children":362},"lorem ipsum 2",[363,371,379,387],{"name":364,"img":365,"target":330,"languages":366},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"ja":367},{"title":368,"url":369,"subtitle":370},"TerraProvider","https://www.terraprovider.com","Microsoft 365向けのTerraform Provider",{"name":372,"img":373,"target":330,"languages":374},"radiusaas","products/radius/radius-nav-logo.svg",{"ja":375},{"title":376,"url":377,"subtitle":378},"RADIUSaaS","https://www.radius-as-a-service.com","ネットワークの認証",{"name":380,"img":381,"target":330,"languages":382},"unifiedcontacts","products/unified-contacts/unifiedcontact-nav-logo.svg",{"ja":383},{"title":384,"url":385,"subtitle":386},"Unified Contacts","https://www.unified-contacts.com","Microsoft Teamsで連絡先を探す",{"name":388,"img":389,"target":330,"languages":390},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"ja":391},{"title":392,"url":393,"subtitle":394},"Autopilot Monitor","https://www.autopilotmonitor.com","Windows Autopilotのリアルタイム監視",{"name":396,"languages":397},"casestudies",{"ja":398},{"title":399,"url":400,"description":401},"導入事例","/ja/casestudies","当社はクラウドの先駆者として、包括的なクラウドソリューションを提供するMicrosoftのトップパートナーです。ブループリントに基づくアプローチとInfrastructure as Codeの知見が土台にあります。",{"name":403,"languages":404,"children":407},"company",{"ja":405},{"title":406,"description":401},"会社",[408,438,462],{"name":409,"languages":410,"children":413},"company-about-us",{"ja":411},{"title":412},"会社概要",[414,420,426,432],{"name":415,"languages":416},"company-facts-figures",{"ja":417},{"title":418,"url":419},"Facts & Figures","/ja/company/facts-and-figures",{"name":421,"languages":422},"company-contact",{"ja":423},{"title":424,"url":425},"お問い合わせと拠点","/ja/company/contact-and-locations",{"name":427,"languages":428},"switzerland",{"ja":429},{"title":430,"url":431},"スイスのglueckkanja","/ja/company/switzerland",{"name":433,"languages":434},"austria",{"ja":435},{"title":436,"url":437},"オーストリアのglueckkanja","/ja/company/austria",{"name":439,"languages":440,"children":443},"company-career",{"ja":441},{"title":442},"キャリア",[444,450,456],{"name":445,"languages":446},"company-career-overview",{"ja":447},{"title":448,"url":449},"採用情報","/ja/career",{"name":451,"languages":452},"company-young-professionals",{"ja":453},{"title":454,"url":455},"Young Professionals","/ja/young-professionals",{"name":457,"languages":458},"company-jobs",{"ja":459},{"title":460,"url":461},"募集職種","/ja/job-offers",{"name":463,"languages":464,"children":467},"company-latest",{"ja":465},{"title":466},"最新情報",[468,474],{"name":469,"languages":470},"company-blog",{"ja":471},{"title":472,"url":473},"ブログ","/ja/blog",{"name":469,"languages":475},{"ja":476},{"title":477,"url":478},"イベント","/ja/events",[480],{"name":481,"languages":482},"career-meta",{"ja":483},{"title":442,"url":449,"active":484},false,{"languages":486},{"ja":487},{"title":488,"url":425,"active":484},"お問い合わせ",{"data":490},{"bgColor":491,"number":492,"mail":493,"brandLogos":494,"logos":495,"links":499,"linksJa":509},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[496],{"img":10,"alt":16,"url":497,"class":498},"index.html","max-w-19rem",[500,503,506],{"title":501,"url":502},"Datenschutz","/de/privacy",{"title":504,"url":505},"Impressum","/de/imprint",{"title":507,"url":508},"No Cookies","/de/cookies",[510,513,516],{"title":511,"url":512},"プライバシーポリシー","/ja/privacy",{"title":514,"url":515},"運営者情報","/ja/imprint",{"title":517,"url":518},"Cookieなし","/ja/cookies",{"id":520,"title":521,"author":522,"body":524,"cta":494,"description":1182,"eventid":494,"extension":1197,"hideInRecent":484,"layout":1198,"meta":1199,"moment":1203,"navigation":325,"path":1221,"seo":1222,"stem":1223,"tags":494,"webcast":484,"__hash__":1224},"content_ja/posts/2026-03-01-exchange-ad-split-permissions-hardening.md","Exchange AD Split Permissionsを後悔なく導入する",[523],"Thorsten Kunzi",{"type":525,"value":526,"toc":1181},"minimal",[527,532,536,543,549,568,571,578,583,586,595,610,616,619,624,660,684,688,696,705,710,726,729,735,739,744,805,810,847,850,853,864,867,883,895,899,902,948,951,960,969,972,987,1004,1017,1029,1034,1093,1097,1102,1122,1129,1153,1156,1159,1162,1177],[528,529,531],"h2",{"id":530},"tldr欠点を取り除いたらどうなるか","TLDR：欠点を取り除いたらどうなるか",[533,534,535],"p",{},"Exchangeのユーザー、グループ、連絡先が置かれている場所で、ADとRBACのアクセス許可を直接再付与する方法を見つけました。管理者にもID管理システムにも変更は不要です。私の経験では、この摩擦こそが多くの企業にとって最大の障害でした。それでいて、ラテラルムーブメントとドメイン侵害に対するセキュリティ上の利点はそのまま残ります。",[533,537,538],{},[539,540],"img",{"alt":541,"src":542},"Active Directory","https://res.cloudinary.com/c4a8/image/upload/v1770991330/blog/pics/Blog_-_Exchange_AD_Split_Permissions_-_1.png",[533,544,545],{},[546,547,548],"strong",{},"実現は3つのステップです。",[550,551,553,562,565],"ol",{"style":552},"margin: 0.25rem 0",[554,555,556,561],"li",{},[557,558,560],"a",{"href":559},"https://learn.microsoft.com/en-us/exchange/permissions/split-permissions/configure-exchange-for-split-permissions#switch-to-active-directory-split-permissions","AD分割アクセス許可モデル","を実装する",[554,563,564],{},"失われたADのアクセス許可を、関連するOUに限定してExchangeサーバーに付与する",[554,566,567],{},"使えなくなったPowerShellコマンドレットを再度有効にするため、Exchange RBACを付与する",[533,569,570],{},"いずれもMicrosoftのガイダンス、AD ACL、またはExchange RBACの割り当てによって行います。",[572,573],"video-frame",{"thumb":574,"alt":575,"id":576,":full-width":577},"/thumbs/thumb-exchange-ad-split-permissions-webcast.jpg","発表者がノートパソコンの前に座り、glueckkanjaの「Step 1: Active Directory Permissions」と題されたスライドを解説しています。スライドではMicrosoft Exchange AD Split Permissionsの実装方法として、委任グループを作成するPowerShellコマンド（New-ADGroup、Add-ADGroupMember）と、スクリプトAdd-ExchangeADSplitPermissionOnOU.ps1によるアクセス許可の適用が示されています。","soNZkNRopSQ","true",[579,580,582],"div",{"style":581},"background:var(--color-gk-light-grey); margin-top:0.5rem; padding:0.5rem 1rem; font-size:0.85rem; color:var(--color-gk-dark-blue)","ウェビナー：Exchange AD Split Permissions without regrets. 手順を追った実装ガイド",[528,584,585],{"id":585},"なぜ今これが重要なのか",[533,587,588,589,592,594],{},"Exchange 2010 SP1で導入されて以来、この仕組みはほとんど見過ごされるか無視されてきました。しかし既定の共有アクセス許可モデルは、Active Directoryを乗っ取られる大きなセキュリティリスクです。ここ数年Exchangeがリモートからの攻撃で悪名高いことと合わせると、いま手を打つべき時期です。",[590,591],"br",{},[590,593],{},"\n問題の出発点は、ドメインのルートに付与され、ドメイン全体へ継承されていく特権にあります。",[596,597,598,601,604,607],"ul",{"style":552},[554,599,600],{},"ユーザーとグループのアクセス許可の変更（実質的にフルアクセス）",[554,602,603],{},"グループメンバーの変更",[554,605,606],{},"ユーザーのパスワードリセット",[554,608,609],{},"ユーザーとグループの作成・削除",[533,611,612],{},[539,613],{"alt":614,"src":615},"アクセス許可","https://res.cloudinary.com/c4a8/image/upload/v1770991330/blog/pics/Blog_-_Exchange_AD_Split_Permissions_-_2.png",[533,617,618],{},"AdminSDHolderプロセス（属性admincount=1）で保護されるのは一部の高特権Tier 0ユーザーとグループだけであり、多くの環境には保護されていないユーザーやグループが残ります。それらはドメインやフォレストの侵害につながるか、少なくとも深刻な影響を招く可能性があります。",[533,620,621],{},[546,622,623],{},"代表的な例",[596,625,626,629,649],{"style":552},[554,627,628],{},"Password Hash Syncを使用している場合のEntra Connect Syncアカウント",[554,630,631,632],{},"既定のグループ",[596,633,635,638,646],{"style":634},"margin: 0",[554,636,637],{},"Allowed RODC Password Replication GroupとEntra Connectアカウントの組み合わせ（実際のWindows RODCが存在する場合）",[554,639,640,641,645],{},"さらに多くの経路を示す",[557,642,644],{"href":643,"target":330},"https://specterops.io/blog/2025/06/25/untrustworthy-trust-builders-account-operators-replicating-trust-attack-aorta","Untrustworthy Trust Builders: Account Operators Replicating Trust Attack (AORTA) - SpecterOps","も参照してください（Account Operatorsグループも同様の脅威です）",[554,647,648],{},"Protected Usersを空にして保護を外し、攻撃経路を作る手口",[554,650,651,652],{},"保護されていないカスタムグループや管理・サービスアカウント",[596,653,654,657],{"style":634},[554,655,656],{},"GPOへの書き込みアクセス許可（ドメインコントローラーに適用されるもの）",[554,658,659],{},"ADバックアップ、バックアップサーバー、PKIテンプレート、ハイパーバイザーなどへのアクセス管理",[533,661,662,663,665,667,668,674,676,678,679],{},"これら現在および将来の潜在的な経路をすべて後追いで封じ込めるのは非常に困難です。_ADMというカスタムOUであればACLの継承を無効化できますが、既定のオブジェクトの多くは既定のBuiltin OUやUsersコンテナーから移動できず、脆弱なまま残ります。",[590,664],{},[590,666],{},"\nルートから強力なアクセス許可を取り除くほうがはるかに良く、それはActive Directory分割アクセス許可モデルを実装することで実現できます。",[557,669,673],{"href":670,"rel":671},"https://learn.microsoft.com/en-us/exchange/permissions/split-permissions/configure-exchange-for-split-permissions",[672],"nofollow","Configure Exchange Server for split permissions | Microsoft Learn",[590,675],{},[590,677],{},"\nMicrosoftも「…Active Directory分割アクセス許可の実装を推奨します」と述べています。",[557,680,683],{"href":681,"rel":682},"https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/active-directory-hardening-series---part-7-%E2%80%93-implementing-least-privilege/4366626",[672],"Active Directory Hardening Series - Part 7 – Implementing Least Privilege | Microsoft Community Hub",[528,685,687],{"id":686},"しかしなぜ誰もやらないのか","しかし、なぜ誰もやらないのか",[533,689,690,691,693,695],{},"分割アクセス許可はExchange 2010 SP1まで利用できず、その頃には誰もが既定の状態を受け入れていました。登場後もセキュリティチームは導入を押し通せなかったように見えます。",[590,692],{},[590,694],{},"\nさらに、ADで先にユーザーや配布リストを作成し、その後でExchangeから「メール有効化」するなど、管理プロセスとIDMプロセスの変更を強いるものでもありました。",[697,698,699],"blockquote",{},[533,700,701,704],{},[546,702,703],{},"Info:"," 次のコマンドレットは利用できなくなるか、動作しなくなります。Add-DistributionGroupMember, New-DistributionGroup, New-Mailbox, New-MailContact, New-MailUser, New-RemoteMailbox, Remove-DistributionGroup, Remove-DistributionGroupMember, Remove-Mailbox, Remove-MailContact, Remove-MailUser, Remove-RemoteMailbox, Update-DistributionGroupMember, Add-ADPermission, Remove-ADPermission",[533,706,707],{},[546,708,709],{},"運用変更の例",[596,711,712,723],{"style":552},[554,713,714,715],{},"New-Mailbox（ExchangeがADに書き込む）は次のようになります",[596,716,717,720],{"style":634},[554,718,719],{},"New-ADUser（adm.jdoeがADに書き込む）",[554,721,722],{},"Enable-Mailbox",[554,724,725],{},"SendAs権限のためのAdd-ADPermissionは、Active Directoryユーザーとコンピューターのセキュリティタブから行う必要があり、標準の管理者には追加のADアクセス許可が必要になることも多くなります。",[528,727,728],{"id":728},"後悔しない方法を紹介します",[533,730,731,734],{},[546,732,733],{},"免責事項","：以下のリンクと記事を最後まで読んで理解し、まずテスト環境で実施し、ADのバックアップが最新であることと復旧手順が確立されていることを必ず確認してください。",[736,737,738],"h3",{"id":738},"現在の利用状況を監査する",[533,740,741],{},[546,742,743],{},"まず、対象のコマンドレットのどれがどのOUで使われているかを確認してください。",[745,746,747,755,757,763,765],"code-block",{},[748,749,750,754],"span",{},[748,751,753],{"style":752},"color:var(--color-gk-orange)","$CsvPath"," = \"C:\\temp\\SplitPermissionAdminAuditLog.csv\"",[590,756],{},[748,758,759,762],{},[748,760,761],{"style":752},"$Cmdlets"," = \"Add-ADPermission\",\"Remove-ADPermission\",\"New-DistributionGroup\",\"Remove-DistributionGroup\",\"Add-DistributionGroupMember\",\"Update-DistributionGroupMember\",\"Remove-DistributionGroupMember\",\"New-Mailbox\",\"Remove-Mailbox\",\"New-RemoteMailbox\",\"Remove-RemoteMailbox\",\"New-MailUser\",\"Remove-MailUser\",\"New-MailContact\",\"Remove-MailContact\"",[590,764],{},[748,766,767,770,771,775,776,770,779,781,782,785,786,770,789,770,792,770,794,797,798,801,802],{},[748,768,769],{"style":752},"Search-AdminAuditLog"," ",[748,772,774],{"style":773},"color:var(--color-gk-mid-blue)","-ResultSize"," 99000 ",[748,777,778],{"style":773},"-Cmdlets",[748,780,761],{"style":752}," | ",[748,783,784],{"style":752},"Select-Object"," RunDate,Caller,ObjectModified,CmdletName,@{Name='CmdletParameters';Expression={[string]::join(\",\", ($\\_.CmdletParameters))}},succeeded,error | ",[748,787,788],{"style":752},"Export-Csv",[748,790,791],{"style":773},"-Path",[748,793,753],{"style":752},[748,795,796],{"style":773},"-Delimiter"," \";\" ",[748,799,800],{"style":773},"-Encoding"," Unicode ",[748,803,804],{"style":773},"-NoTypeInformation",[533,806,807],{},[546,808,809],{},"呼び出し元とコマンドレットの簡易分析",[745,811,812,828,830,838,840],{},[748,813,814,817,818,770,821,770,823,770,825,827],{},[748,815,816],{"style":752},"$CSVs"," = ",[748,819,820],{"style":752},"Import-Csv",[748,822,791],{"style":773},[748,824,753],{"style":752},[748,826,796],{"style":773}," \";\"",[590,829],{},[748,831,832,781,834,837],{},[748,833,816],{"style":752},[748,835,836],{"style":752},"Group-Object"," Caller",[590,839],{},[748,841,842,781,844,846],{},[748,843,816],{"style":752},[748,845,836],{"style":752}," CmdletName",[533,848,849],{},"CSVを分析し、ADのアクセス許可がどこで必要になるかを把握してください。Exchange関連のグループを専用のOUにまとめておくと、さらに最適化できる場合があります。",[528,851,852],{"id":852},"分割アクセス許可モデルを有効にする",[533,854,855,859,860],{},[557,856,673],{"href":857,"rel":858},"https://learn.microsoft.com/en-us/exchange/configure-exchange-server-for-split-permissions",[672],"\nに記載されたMicrosoftの手順**「Switch to Active Directory split permissions」**に従ってください。\n",[861,862,863],"em",{},"（RBAC分割アクセス許可ではありません）",[533,865,866],{},"実質的には、**「Exchange Windows Permissions」**グループの危険なアクセス許可が削除され、あわせてExchangeがそのグループのメンバーから外されます。",[745,868,869],{},[748,870,871,770,874,770,877,770,880],{},[748,872,873],{"style":752},"Setup.exe",[748,875,876],{"style":773},"/IAcceptExchangeServerLicenseTerms_DiagnosticDataOFF",[748,878,879],{"style":773},"/PrepareAD",[748,881,882],{"style":773},"/ActiveDirectorySplitPermissions:true",[579,884,886,887,889,890,894],{"style":885},"background:#f4f4f4; border-left:4px solid var(--color-gk-petrol); border-radius:0 6px 6px 0; padding:0.75rem 1rem; margin:1rem 0; font-size:0.88rem; color:#000520;","\n  ",[546,888,703],{}," 元に戻すには ",[891,892,893],"code",{},"/ActiveDirectorySplitPermissions:false"," を使うだけです\n",[736,896,898],{"id":897},"adのアクセス許可を付与する","ADのアクセス許可を付与する",[533,900,901],{},"カスタムADグループを作成し、Exchangeサーバーをそのメンバーにします。",[745,903,904,910,912,770,915,918,919,922,923,926,927,770,929,770,932,935,936,938,918,941,944,945],{},[748,905,906],{},[748,907,909],{"style":908},"color:var(--color-black-40)","# adjust OU Path first!",[590,911],{},[748,913,914],{"style":752},"New-ADGroup",[748,916,917],{"style":773},"-Name"," \"AD_Custom Exchange Split permissions replacement\" ",[748,920,921],{"style":773},"-GroupCategory"," Security ",[748,924,925],{"style":773},"-GroupScope"," DomainLocal ",[748,928,791],{"style":773},[546,930,931],{},"\"OU=Rights,OU=Groups,OU=T1,OU=_ADM,$((Get-ADDomain).DistinguishedName)\"",[748,933,934],{"style":773},"-Description"," \"replaces the permissions lost by split permissions on relevant OUs\"",[590,937],{},[748,939,940],{"style":752},"Add-ADGroupMember",[748,942,943],{"style":773},"-Members"," \"Exchange Trusted Subsystem\"\n",[748,946,947],{"style":908},"# reboot Exchange servers for permissions via group to work",[533,949,950],{},"ユースケースごとにADアクセス許可を簡単に委任できるスクリプトを作成しました。",[697,952,953],{},[533,954,955,956,959],{},"これらのアクセス許可がないと、ExchangeサーバーはADから",[891,957,958],{},"“INSUFF_ACCESS_RIGHTS”","というエラーを受け取ります。",[533,961,962,963,968],{},"glueckkanjaのGitHubから",[557,964,967],{"href":965,"rel":966},"https://github.com/glueckkanja/code-snippets/blob/main/ExchangeADSplitPermission/Add-ExchangeADSplitPermissionOnOU.ps1",[672],"Add-ExchangeADSplitPermissionOnOU.ps1","をダウンロードしてください",[533,970,971],{},"付与できるPermissionTypeは次のとおりです。",[533,973,975,978,980,981,983],{"style":974},"background:#f5f5f5;padding:0.5rem 1rem;margin:0.25rem 0;border-left:3px solid #d8d8d8;",[546,976,977],{},"CreateUserAndContact",[590,979],{},"ユーザーと連絡先に対するCreate/delete、ResetPassword、WriteAllProperties",[590,982],{},[984,985,986],"small",{},"Exchangeコマンドレット: `New-Mailbox`, `New-RemoteMailbox`, `New-MailUser`, `New-MailContact` と対応する `Remove-*`",[533,988,990,993,995,996,998],{"style":989},"background:#f5f5f5;padding:0.5rem 1rem;margin:0.25rem 0;border-left:3px solid #d8d8d8",[546,991,992],{},"GroupManage",[590,994],{},"グループの作成・削除、メンバーの変更",[590,997],{},[984,999,1000,1001,1003],{},"Exchangeコマンドレット: `New-DistributionGroup`, `Remove-DistributionGroup`, `Add-DistributionGroupMember`, `Update-DistributionGroupMember`, `Remove-DistributionGroupMember`",[590,1002],{},"その他: ユーザーが自分の所有するDistributionGroupをEAC経由で管理する",[533,1005,1006,1009,1011,1012,1014],{"style":989},[546,1007,1008],{},"UserSendAs",[590,1010],{},"ユーザーのADアクセス許可の変更",[590,1013],{},[984,1015,1016],{},"Exchangeコマンドレット: `Add-ADPermission`",[533,1018,1019,1022,1024,1025,1027],{"style":989},[546,1020,1021],{},"GroupSendAs",[590,1023],{},"グループのADアクセス許可の変更",[590,1026],{},[984,1028,1016],{},[533,1030,1031],{},[546,1032,1033],{},"スクリプトの使い方",[745,1035,1036,770,1038,1041,1042,1045,1046,1049,1050,1053,1055,770,1057,1059,1060,1062,1063,1049,1065,770,1067,1059,1069,1071,1072,1049,1074,770,1076,1078,1079,1081,1082,1049,1084,770,1086,1078,1088,1090,1091,1049],{},[748,1037,967],{"style":752},[748,1039,1040],{"style":773},"-TargetOU"," \u003COU> ",[748,1043,1044],{"style":773},"-PermissionType"," \u003CGroupManage|UserSendAs|GroupSendAs|CreateUserAndContact> ",[748,1047,1048],{"style":773},"-Trustee"," \"AD_Custom Exchange Split permissions replacement\"\n",[748,1051,1052],{"style":908},"# For example",[590,1054],{},[748,1056,967],{"style":752},[748,1058,1040],{"style":773}," \"OU=ExchangeGroups,OU=HQ,OU=Alderaan,$((Get-ADDomain).DistinguishedName)\" ",[748,1061,1044],{"style":773}," GroupManage ",[748,1064,1048],{"style":773},[748,1066,967],{"style":752},[748,1068,1040],{"style":773},[748,1070,1044],{"style":773}," GroupSendAs ",[748,1073,1048],{"style":773},[748,1075,967],{"style":752},[748,1077,1040],{"style":773}," \"OU=Users,OU=HQ,OU=Alderaan,$((Get-ADDomain).DistinguishedName)\" ",[748,1080,1044],{"style":773}," UserSendAs ",[748,1083,1048],{"style":773},[748,1085,967],{"style":752},[748,1087,1040],{"style":773},[748,1089,1044],{"style":773}," CreateUserAndContact ",[748,1092,1048],{"style":773},[736,1094,1096],{"id":1095},"exchange-rbacを付与する","Exchange RBACを付与する",[533,1098,1099],{},[546,1100,1101],{},"Add-DistributionGroupMemberとRemove-DistributionGroupMemberの各コマンドレットで-BypassSecurityGroupManagerCheckパラメーターを再度有効にします",[745,1103,1104],{},[748,1105,1106,770,1109,1111,1112,1115,1116,1118,1119,1121],{},[748,1107,1108],{"style":752},"New-RoleGroup",[748,1110,917],{"style":773}," \"SplitPermission Security Group Creation and Membership\" ",[748,1113,1114],{"style":773},"-Roles"," \"Security Group Creation and Membership\" ",[748,1117,943],{"style":773}," \"Organization Management\",\"Recipient Management\" ",[748,1120,934],{"style":773}," \"Brings back -BypassSecurityGroupManagerCheck to Add-DistributionGroupMember, but also needs AD ACL for Exchange Server on target DLs\"",[697,1123,1124],{},[533,1125,1126,1128],{},[546,1127,703],{}," これを行わないと \"-BypassSecurityGroupManagerCheck parameter is not available\" または \"You don't have sufficient permissions. This operation can only be performed by a manager of the group\" というエラーになります。",[533,1130,1131,1133,1136,1138],{},[590,1132],{},[546,1134,1135],{},"New-Mailbox、New-RemoteMailbox、New-MailContact、Remove-... の各コマンドレットを必要なパラメーター付きで再度有効にします",[590,1137],{},[745,1139,1140,770,1142,1144,1145,1147,1148,1118,1150,1152],{},[748,1141,1108],{"style":752},[748,1143,917],{"style":773}," \"SplitPermission Mail Recipient Creation\" ",[748,1146,1114],{"style":773}," \"Mail Recipient Creation\" ",[748,1149,943],{"style":773},[748,1151,934],{"style":773}," \"Brings back New-Mailbox, New-RemoteMailbox, New-MailUser, New-MailContact and matching Remove-... cmdlets, but additionally Exchange needs AD ACL for Exchange Server on target OUs\"",[528,1154,1155],{"id":1155},"まとめ",[533,1157,1158],{},"このガイドが、Exchange経由のActive Directory侵害を防ぐという重要な一歩を、より多くの組織が踏み出す助けになれば幸いです。複数のお客様でExchange AD Split Permissionsモデルを実装してきましたが、これまで問題に遭遇したことはなく、導入もスムーズに進んでいます。",[533,1160,1161],{},"現在のオールオアナッシングの方式ではなく、OU単位でこの粒度を実現できるネイティブの仕組みをMicrosoftが提供してくれれば、広く採用されるようになるはずです。",[533,1163,1164,1165,1170,1171,1176],{},"ADのTier分離について一言。Exchangeサーバーへドメイン管理者やその他のTier 0アカウントでログオンしないでください。ExchangeサーバーはTier 1として扱い、できるだけ早くADのTier分離を実装してください。最初の一歩としては、",[557,1166,1169],{"href":1167,"rel":1168},"https://www.pingcastle.com/",[672],"PingCastle","や",[557,1172,1175],{"href":1173,"rel":1174},"https://www.semperis.com/purple-knight/",[672],"Purple Knight","でADのセキュリティ状況を評価し、コントロールパスの露出を洗い出すことをおすすめします。",[1178,1179,1180],"style",{},"\ncode {\n  font-size: inherit\n}\n",{"title":1182,"searchDepth":1183,"depth":1183,"links":1184},"",2,[1185,1186,1187,1188,1192,1196],{"id":530,"depth":1183,"text":531},{"id":585,"depth":1183,"text":585},{"id":686,"depth":1183,"text":687},{"id":728,"depth":1183,"text":728,"children":1189},[1190],{"id":738,"depth":1191,"text":738},3,{"id":852,"depth":1183,"text":852,"children":1193},[1194,1195],{"id":897,"depth":1191,"text":898},{"id":1095,"depth":1191,"text":1096},{"id":1155,"depth":1183,"text":1155},"md","post",{"lang":1200,"seoTitle":1201,"titleClass":1202,"date":1203,"blogtitlepic":1204,"socialimg":1205,"customExcerpt":1206,"keywords":1207,"scripts":1208,"asideNav":1209,"maxContent":325,"published":325},"ja","Exchange AD Split Permissions：最小権限でActive Directoryを守る","h2-font-size","2026-03-01","head-exchange-ad-split-permissions","/blog/heads/head-exchange-ad-split-permissions.jpg","メールボックスをすべてクラウドへ移行済みの組織でも、オンプレミスのExchangeサーバーは動き続けていることが多く、それはActive Directoryにとって過小評価されたセキュリティリスクでもあります。「AD Split Permissions」モデルは、攻撃者がドメイン全体の侵害に悪用しうる広範なADの特権をExchangeから取り除きます。これまで導入が進まなかった主な理由は、管理者に強いるプロセス変更でした。本記事では、まさにそのハードルをスマートに乗り越える方法を紹介します。失われたADのアクセス許可を関連するOUにだけ選択的に再付与するスクリプトを使えば、慣れ親しんだ運用をそのままに、セキュリティ上の効果を余さず得られます。","Exchange Server, Active Directory, AD分割アクセス許可, RBAC, Exchangeアクセス許可, AdminSDHolder, 最小権限, AD ACL, PowerShell",{"slick":325,"form":325},{"menuItems":1210},[1211,1213,1215,1217,1219],{"href":1212,"text":531},"#tldr欠点を取り除いたらどうなるか",{"href":1214,"text":585},"#なぜ今これが重要なのか",{"href":1216,"text":687},"#しかしなぜ誰もやらないのか",{"href":1218,"text":728},"#後悔しない方法を紹介します",{"href":1220,"text":1155},"#まとめ","/posts/2026-03-01-exchange-ad-split-permissions-hardening",{"title":521,"description":1182},"posts/2026-03-01-exchange-ad-split-permissions-hardening","nKUJDr2vxu6-4osz5GwwEI4qKNJRCdcRKnB9X84zc0s",{"id":1226,"extension":1227,"meta":1228,"stem":8,"__hash__":1578},"authors_data/authors.json","json",{"path":1229,"Fritz Zurhorst":1230,"Alexander Schlindwein":1236,"Sophie Luna":1242,"Nadine Klein":1250,"Karsten Kleinschmidt":1256,"Julian Wendt":1264,"Holger Bunkradt":1269,"Ralf Mania":1275,"Oliver Kieselbach":1281,"Steffen Schwerdtfeger":1287,"Gunnar Winter":1295,"Jan Petersen":1300,"Thorsten Kunzi":1305,"Moritz Pohl":1308,"Thorben Pöschus":1313,"Christoph Hannebauer":1319,"Marco Scheel":1323,"Christopher Brumm":1328,"Florian Klante":1335,"Niklas Bachmann":1340,"Nils Krautkrämer":1345,"Patrick Treptau":1351,"Peter Beckendorf":1356,"Patrick Sobau":1361,"Jörg Wunderlich":1366,"Michael Breither":1370,"Christian Kanja":1375,"Zeba Hoffmann":1381,"Jochen Fröhlich":1386,"Jan Geisbauer":1390,"Gerrit Reinke":1402,"Christian Kordel":1408,"Stephan Wälde":1412,"Carolin Kanja":1417,"Adrian Ritter":1423,"Marvin Bangert":1428,"Thorsten Pickhan":1434,"Christian Lorenz":1440,"Denis Böhm":1445,"Fabian Bader":1450,"Juan Jose Fernandez Perez":1456,"Mahschid Sayyar":1461,"Benjamin Dassow":1466,"Markus Walschburger":1471,"Jonathan Haist":1476,"Daniel Rohregger":1481,"Thomas Naunheim":1486,"Florian Stöckl":1491,"Pascal Asch":1496,"Markus Kättner":1501,"Anna Ulbricht":1508,"Annette Brauns":1515,"body":1521,"title":1577},"/authors",{"display_name":1231,"avatar":1232,"permalink":1233,"linkedin":1234,"imageOffsetTop":1235},"Fritz Zurhorst","people/people-fritz-zurhorst.png","/authors/fritz-zurhorst","friedemann-z","72%",{"display_name":1237,"avatar":1238,"permalink":1239,"twitter":1240,"linkedin":1241},"Alexander Schlindwein","people/people-alexander-rudolph.png","/authors/alexander-schlindwein","AlexanderOnIT","schlindwein-alexander",{"display_name":1243,"avatar":1244,"permalink":1245,"twitter":1246,"linkedin":1247,"imageOffsetLeft":1248,"imageOffsetTop":1249},"Sophie Luna","people/people-sophie-luna.jpg","/authors/sophie-luna","glueckkanjagab","../company/glueckkanja-gab","58%","67%",{"display_name":1251,"avatar":1252,"permalink":1253,"twitter":1254,"linkedin":1255,"imageOffsetTop":1235},"Nadine Klein","people/people-nadine-kern.png","/authors/nadine-kern","nadineausRT","nadine-kern",{"display_name":1257,"avatar":1258,"permalink":1259,"twitter":1260,"linkedin":1261,"imageOffsetTop":1262,"imageOffsetLeft":1263},"Karsten Kleinschmidt","/c_pad,w_800,h_700/people/karsten-kleinschmidt.jpg","/authors/karsten-kleinschmidt","KarstenonIT","karstenkleinschmidt","60%","57%",{"display_name":1265,"avatar":1266,"permalink":1267,"linkedin":1268},"Julian Wendt","people/people-julian-wendt.png","/authors/julian-wendt","julian-wendt",{"display_name":1270,"avatar":1271,"permalink":1272,"linkedin":1273,"twitter":1274},"Holger Bunkradt","people/people-holger-bunkradt.png","/authors/holger-bunkradt","holger-bunkradt-12b5053b","hbunkradt",{"display_name":1276,"avatar":1277,"permalink":1278,"linkedin":1279,"twitter":1280},"Ralf Mania","people/people-ralf-mania.png","/authors/ralf-mania","ralf-mania-146a2757","RaMa1976",{"display_name":1282,"avatar":1283,"permalink":1284,"linkedin":1285,"twitter":1286},"Oliver Kieselbach","people/people-oliver-kieselbach.png","/authors/oliver-kieselbach","oliver-kieselbach-a4a3409","okieselbT",{"display_name":1288,"avatar":1289,"permalink":1290,"linkedin":1291,"twitter":1292,"imageOffsetTop":1293,"imageOffsetLeft":1294},"Steffen Schwerdtfeger","people/people-steffen-schwerdtfeger.png","/authors/steffen-schwerdtfeger","steffen-schwerdtfeger","SteffenAtCloud","79%","51%",{"display_name":1296,"avatar":1297,"permalink":1298,"twitter":1246,"linkedin":1299},"Gunnar Winter","people/people-gunnar-winter.jpg","/authors/gunnar-winter","company/glueckkanja-gab",{"display_name":1301,"avatar":1302,"permalink":1303,"twitter":1246,"linkedin":1304},"Jan Petersen","people/jan-petersen.png","/authors/jan-petersen","jan-petersen-26a901",{"display_name":523,"avatar":1306,"permalink":1307,"twitter":1246,"linkedin":1299,"imageOffsetTop":1235},"people/author-thorsten-kunzi.png","/authors/thorsten-kunzi",{"display_name":1309,"avatar":1310,"permalink":1311,"twitter":1246,"linkedin":1312},"Dr. Moritz Pohl","people/people-moritz-pohl.png","/authors/moritz-pohl","dr-moritz-pohl",{"display_name":1314,"avatar":1315,"permalink":1316,"twitter":1317,"linkedin":1318},"Thorben Pöschus","people/thorben.poeschus.png","/authors/thorben-poeschus","TPO901","thorben-pöschus-624693b7",{"display_name":1320,"avatar":1321,"permalink":1322,"twitter":1246,"linkedin":1299,"imageOffsetTop":1235},"Dr. Christoph Hannebauer","people/people-christoph-hannebauer.png","/authors/christoph-hannebauer",{"display_name":1324,"avatar":1325,"permalink":1326,"twitter":1327,"linkedin":1327},"Marco Scheel","people/people-marco-scheel.png","/authors/marco-scheel","marcoscheel",{"display_name":1329,"avatar":1330,"permalink":1331,"twitter":1332,"linkedin":1333,"imageOffsetTop":1334},"Christopher Brumm","people/people-christopher-brumm.jpg","/authors/christopher-brumm","cbrhh","christopherbrumm","66%",{"display_name":1336,"avatar":1337,"permalink":1338,"linkedin":1339,"twitter":1246},"Florian Klante","people/florian-klante.jpg","/authors/florian-klante","florian-klante-6031b31b",{"display_name":1341,"avatar":1342,"permalink":1343,"linkedin":1344,"twitter":1246},"Niklas Bachmann","people/niklas.bachmann.png","/authors/niklas-bachmann","niklas-bachmann-66a863158",{"display_name":1346,"avatar":1347,"permalink":1348,"twitter":1349,"linkedin":1350},"Nils Krautkrämer","people/nils-krautkraemer.png","/authors/nils-krautkraemer","KrauNils","nils-krautkrämer-8b04bb250",{"display_name":1352,"avatar":1353,"permalink":1354,"linkedin":1355,"twitter":1246},"Patrick Treptau","people/people-patrick-treptau.png","/authors/patrick-traptau","ptreptau",{"display_name":1357,"avatar":1358,"permalink":1359,"linkedin":1360,"twitter":1246,"imageOffsetTop":1235},"Peter Beckendorf","people/peter-beckendorf.png","/authors/peter-beckendorf","peter-beckendorf-29a239b1",{"display_name":1362,"avatar":1363,"permalink":1364,"linkedin":1365,"twitter":1246},"Patrick Sobau","people/patrick-sobau.png","/authors/patrick-sobau","patrick-sobau",{"display_name":1367,"avatar":1368,"permalink":1369,"twitter":1246},"Jörg Wunderlich","people/joerg-wunderlich.png","/authors/joerg-wunderlich",{"display_name":1371,"avatar":1372,"permalink":1373,"twitter":1246,"linkedin":1374},"Michael Breither","people/people-michael-breither.jpg","/authors/michael-breither","michaelbreither",{"display_name":1376,"avatar":1377,"permalink":1378,"twitter":1379,"linkedin":1380},"Christian Kanja","people/people-christian-kanja.png","/authors/christian-kanja","cekageka","christian-kanja",{"display_name":1382,"avatar":1383,"permalink":1384,"linkedin":1385,"twitter":1246},"Zeba Hoffmann","people/zeba-hoffmann.png","/authors/zeba-hoffmann","zebahoffmann",{"display_name":1387,"avatar":1388,"permalink":1389,"twitter":1246,"linkedin":1299},"Jochen Fröhlich","people/people-jochen-froehlich.png","/authors/jochen-froehlich",{"display_name":1391,"avatar":1392,"permalink":1393,"twitter":1394,"linkedin":1394,"imageOffsetTop":1235,"socials":1395},"Jan Geisbauer","people/people-jan-geisbauer-csoc.png","/authors/jan-geisbauer","JanGeisbauer",[1396,1399],{"text":1397,"href":1398},"Blog","https://emptydc.com",{"text":1400,"href":1401},"Podcast","https://hairlessinthecloud.com",{"display_name":1403,"avatar":1404,"permalink":1405,"twitter":1406,"linkedin":1407},"Gerrit Reinke","people/gerrit-reinke.png","/authors/gerrit-reinke","GLWRe","glwr",{"display_name":1409,"avatar":1410,"permalink":1411,"twitter":1246,"linkedin":1299},"Christian Kordel","people/christian-kordel.png","/authors/christian-kordel",{"display_name":1413,"avatar":1414,"permalink":1415,"twitter":1416,"linkedin":1299},"Stephan Wälde","people/people-stephan-waelde.png","/authors/stephan-waelde","stephanwaelde",{"display_name":1418,"avatar":1419,"permalink":1420,"twitter":1421,"linkedin":1422},"Carolin Kanja","people/people-carolin-kanja.jpg","/authors/carolin-kanja","fraukanja","carolin-kanja",{"display_name":1424,"avatar":1425,"permalink":1426,"twitter":1427,"linkedin":1427},"Adrian Ritter","people/people-adrian-ritter.png","/authors/adrian-ritter","adrianritter",{"display_name":1429,"avatar":1430,"permalink":1431,"twitter":1432,"linkedin":1433},"Marvin Bangert","people/people-marvin-bangert.png","/authors/marvin-bangert","marvinbangert","marvin-bangert",{"display_name":1435,"avatar":1436,"permalink":1437,"twitter":1438,"linkedin":1439},"Thorsten Pickhan","people/people-thorsten-pickhan.png","/authors/thorsten-pickhan","tpickhan","thorsten-pickhan",{"display_name":1441,"avatar":1442,"permalink":1443,"linkedin":1444,"twitter":1246},"Christian Lorenz","people/people-christian-lorenz.png","/authors/christian-lorenz","christianlorenz95",{"display_name":1446,"avatar":1447,"permalink":1448,"linkedin":1449,"twitter":1246},"Denis Böhm","people/people-denis-boehm.png","/authors/denis-boehm","denis-böhm-3bb834135",{"display_name":1451,"avatar":1452,"permalink":1453,"linkedin":1454,"twitter":1455},"Fabian Bader","people/people-fabian-bader.jpg","/authors/fabian-bader","fabianbader","fabian_bader",{"display_name":1457,"avatar":1458,"permalink":1459,"linkedin":1460},"Juan Jose Fernandez Perez","people/people-juan-jose-fernandez.jpg","/authors/juan-jose-fernandez-perez","juan-jose-fernandez-perez-8016055",{"display_name":1462,"avatar":1463,"permalink":1464,"linkedin":1465},"Mahschid Sayyar","people/people-mahschid-sayyar.jpg","/authors/mahschid-sayyar","mahschid-sayyar-97544463",{"display_name":1467,"avatar":1468,"permalink":1469,"linkedin":1470},"Benjamin Dassow","people/people-benjamin-dassow.jpg","/authors/benjamin-dassow","benjamin-dassow",{"display_name":1472,"avatar":1473,"permalink":1474,"linkedin":1475},"Markus Walschburger","people/people-markus-walschburger.jpg","/authors/markus-walschburger","markus-walschburger",{"display_name":1477,"avatar":1478,"permalink":1479,"linkedin":1480,"imageOffsetTop":1235},"Jonathan Haist","people/people-jonathan-haist.jpg","/authors/jonathan-haist","jonathanhaist",{"display_name":1482,"avatar":1483,"permalink":1484,"linkedin":1485,"imageOffsetTop":1235},"Daniel Rohregger","people/people-daniel-rohregger.jpg","/authors/daniel-rohregger","drohregger",{"display_name":1487,"avatar":1488,"permalink":1489,"linkedin":1490,"imageOffsetTop":1334},"Thomas Naunheim","people/people-thomas-naunheim.jpg","/authors/thomas-naunheim","thomasnaunheim",{"display_name":1492,"avatar":1493,"permalink":1494,"linkedin":1495,"imageOffsetTop":1334},"Florian Stöckl","people/people-florian-stoeckl.jpg","/authors/florian-stoeckl","florianstoeckl",{"display_name":1497,"avatar":1498,"permalink":1499,"linkedin":1500,"imageOffsetTop":1334},"Pascal Asch","people/Pascal.Asch.648.jpg","/authors/pascal-asch","pascal-asch",{"display_name":1502,"avatar":1503,"permalink":1504,"linkedin":1505,"imageOffsetTop":1506,"imageOffsetLeft":1507},"Markus Kättner","people/markus-kaettner.jpg","/authors/markus-kaettner","markus-kättner-b600119","62%","63%",{"display_name":1509,"avatar":1510,"permalink":1511,"linkedin":1512,"imageOffsetTop":1513,"imageOffsetLeft":1514},"Anna Ulbricht","people/anna-katharina.ulbricht-09.png","/authors/anna-ulbricht","anna-katharina-u-a67702199","70%","50%",{"display_name":1516,"avatar":1517,"permalink":1518,"linkedin":1519,"imageOffsetTop":1520,"imageOffsetLeft":1262},"Annette Brauns","people/Annette-Brauns-8.jpg","/authors/annette-brauns","annette-brauns","95%",{"Fritz Zurhorst":1522,"Alexander Schlindwein":1523,"Sophie Luna":1524,"Nadine Klein":1525,"Karsten Kleinschmidt":1526,"Julian Wendt":1527,"Holger Bunkradt":1528,"Ralf Mania":1529,"Oliver Kieselbach":1530,"Steffen Schwerdtfeger":1531,"Gunnar Winter":1532,"Jan Petersen":1533,"Thorsten Kunzi":1534,"Moritz Pohl":1535,"Thorben Pöschus":1536,"Christoph Hannebauer":1537,"Marco Scheel":1538,"Christopher Brumm":1539,"Florian Klante":1540,"Niklas Bachmann":1541,"Nils Krautkrämer":1542,"Patrick Treptau":1543,"Peter Beckendorf":1544,"Patrick Sobau":1545,"Jörg Wunderlich":1546,"Michael Breither":1547,"Christian Kanja":1548,"Zeba Hoffmann":1549,"Jochen Fröhlich":1550,"Jan Geisbauer":1551,"Gerrit Reinke":1555,"Christian Kordel":1556,"Stephan Wälde":1557,"Carolin Kanja":1558,"Adrian Ritter":1559,"Marvin Bangert":1560,"Thorsten Pickhan":1561,"Christian Lorenz":1562,"Denis Böhm":1563,"Fabian Bader":1564,"Juan Jose Fernandez Perez":1565,"Mahschid Sayyar":1566,"Benjamin Dassow":1567,"Markus Walschburger":1568,"Jonathan Haist":1569,"Daniel Rohregger":1570,"Thomas Naunheim":1571,"Florian Stöckl":1572,"Pascal Asch":1573,"Markus Kättner":1574,"Anna Ulbricht":1575,"Annette Brauns":1576},{"display_name":1231,"avatar":1232,"permalink":1233,"linkedin":1234,"imageOffsetTop":1235},{"display_name":1237,"avatar":1238,"permalink":1239,"twitter":1240,"linkedin":1241},{"display_name":1243,"avatar":1244,"permalink":1245,"twitter":1246,"linkedin":1247,"imageOffsetLeft":1248,"imageOffsetTop":1249},{"display_name":1251,"avatar":1252,"permalink":1253,"twitter":1254,"linkedin":1255,"imageOffsetTop":1235},{"display_name":1257,"avatar":1258,"permalink":1259,"twitter":1260,"linkedin":1261,"imageOffsetTop":1262,"imageOffsetLeft":1263},{"display_name":1265,"avatar":1266,"permalink":1267,"linkedin":1268},{"display_name":1270,"avatar":1271,"permalink":1272,"linkedin":1273,"twitter":1274},{"display_name":1276,"avatar":1277,"permalink":1278,"linkedin":1279,"twitter":1280},{"display_name":1282,"avatar":1283,"permalink":1284,"linkedin":1285,"twitter":1286},{"display_name":1288,"avatar":1289,"permalink":1290,"linkedin":1291,"twitter":1292,"imageOffsetTop":1293,"imageOffsetLeft":1294},{"display_name":1296,"avatar":1297,"permalink":1298,"twitter":1246,"linkedin":1299},{"display_name":1301,"avatar":1302,"permalink":1303,"twitter":1246,"linkedin":1304},{"display_name":523,"avatar":1306,"permalink":1307,"twitter":1246,"linkedin":1299,"imageOffsetTop":1235},{"display_name":1309,"avatar":1310,"permalink":1311,"twitter":1246,"linkedin":1312},{"display_name":1314,"avatar":1315,"permalink":1316,"twitter":1317,"linkedin":1318},{"display_name":1320,"avatar":1321,"permalink":1322,"twitter":1246,"linkedin":1299,"imageOffsetTop":1235},{"display_name":1324,"avatar":1325,"permalink":1326,"twitter":1327,"linkedin":1327},{"display_name":1329,"avatar":1330,"permalink":1331,"twitter":1332,"linkedin":1333,"imageOffsetTop":1334},{"display_name":1336,"avatar":1337,"permalink":1338,"linkedin":1339,"twitter":1246},{"display_name":1341,"avatar":1342,"permalink":1343,"linkedin":1344,"twitter":1246},{"display_name":1346,"avatar":1347,"permalink":1348,"twitter":1349,"linkedin":1350},{"display_name":1352,"avatar":1353,"permalink":1354,"linkedin":1355,"twitter":1246},{"display_name":1357,"avatar":1358,"permalink":1359,"linkedin":1360,"twitter":1246,"imageOffsetTop":1235},{"display_name":1362,"avatar":1363,"permalink":1364,"linkedin":1365,"twitter":1246},{"display_name":1367,"avatar":1368,"permalink":1369,"twitter":1246},{"display_name":1371,"avatar":1372,"permalink":1373,"twitter":1246,"linkedin":1374},{"display_name":1376,"avatar":1377,"permalink":1378,"twitter":1379,"linkedin":1380},{"display_name":1382,"avatar":1383,"permalink":1384,"linkedin":1385,"twitter":1246},{"display_name":1387,"avatar":1388,"permalink":1389,"twitter":1246,"linkedin":1299},{"display_name":1391,"avatar":1392,"permalink":1393,"twitter":1394,"linkedin":1394,"imageOffsetTop":1235,"socials":1552},[1553,1554],{"text":1397,"href":1398},{"text":1400,"href":1401},{"display_name":1403,"avatar":1404,"permalink":1405,"twitter":1406,"linkedin":1407},{"display_name":1409,"avatar":1410,"permalink":1411,"twitter":1246,"linkedin":1299},{"display_name":1413,"avatar":1414,"permalink":1415,"twitter":1416,"linkedin":1299},{"display_name":1418,"avatar":1419,"permalink":1420,"twitter":1421,"linkedin":1422},{"display_name":1424,"avatar":1425,"permalink":1426,"twitter":1427,"linkedin":1427},{"display_name":1429,"avatar":1430,"permalink":1431,"twitter":1432,"linkedin":1433},{"display_name":1435,"avatar":1436,"permalink":1437,"twitter":1438,"linkedin":1439},{"display_name":1441,"avatar":1442,"permalink":1443,"linkedin":1444,"twitter":1246},{"display_name":1446,"avatar":1447,"permalink":1448,"linkedin":1449,"twitter":1246},{"display_name":1451,"avatar":1452,"permalink":1453,"linkedin":1454,"twitter":1455},{"display_name":1457,"avatar":1458,"permalink":1459,"linkedin":1460},{"display_name":1462,"avatar":1463,"permalink":1464,"linkedin":1465},{"display_name":1467,"avatar":1468,"permalink":1469,"linkedin":1470},{"display_name":1472,"avatar":1473,"permalink":1474,"linkedin":1475},{"display_name":1477,"avatar":1478,"permalink":1479,"linkedin":1480,"imageOffsetTop":1235},{"display_name":1482,"avatar":1483,"permalink":1484,"linkedin":1485,"imageOffsetTop":1235},{"display_name":1487,"avatar":1488,"permalink":1489,"linkedin":1490,"imageOffsetTop":1334},{"display_name":1492,"avatar":1493,"permalink":1494,"linkedin":1495,"imageOffsetTop":1334},{"display_name":1497,"avatar":1498,"permalink":1499,"linkedin":1500,"imageOffsetTop":1334},{"display_name":1502,"avatar":1503,"permalink":1504,"linkedin":1505,"imageOffsetTop":1506,"imageOffsetLeft":1507},{"display_name":1509,"avatar":1510,"permalink":1511,"linkedin":1512,"imageOffsetTop":1513,"imageOffsetLeft":1514},{"display_name":1516,"avatar":1517,"permalink":1518,"linkedin":1519,"imageOffsetTop":1520,"imageOffsetLeft":1262},"Authors","1csawlkJxRljy93GTOnXEkwLqAv9Lcj-apxRvoodAOY",{"list":1580,"authors":1797},[1581,1598,1612,1626,1642,1655,1668,1681,1693,1709,1723,1738,1756,1767,1781],{"id":1582,"title":1583,"author":1584,"cta":494,"description":1182,"hideInRecent":484,"layout":1198,"meta":1585,"moment":1590,"path":1591,"stem":1592,"tags":1593,"webcast":484},"content_ja/posts/2026-09-22-end-of-mfa-sms.md","MFA向けSMSの終わり",[1257],{"lang":1200,"date":1586,"categories":1587,"blogtitlepic":1588,"customExcerpt":1589},"2026-09-21",[235],"head-conditional-access.jpg","企業がいまフィッシング耐性のある、できるだけパスワードレスな認証方式へ移行すべき理由。","2026-09-22","/posts/2026-09-22-end-of-mfa-sms","posts/2026-09-22-end-of-mfa-sms",[235,1594,1595,1596,1597],"Authentication","Microsoft Entra ID","MFA","Passkeys",{"id":1599,"title":1600,"author":1601,"cta":494,"description":1182,"hideInRecent":484,"layout":1198,"meta":1602,"moment":1586,"path":1606,"stem":1607,"tags":1608,"webcast":484},"content_ja/posts/2026-09-21-clickfix-prevent-detect.md","ClickFix。ユーザー自身がエクスプロイトになるとき、そしてそれを止める方法",[1231,1251],{"lang":1200,"date":1586,"categories":1603,"blogtitlepic":1604,"customExcerpt":1605},[235],"head-clickfix.jpg","ClickFixはユーザーを自分自身への攻撃者に変えます。偽のCAPTCHA、コピー＆ペースト、そして悪意あるコードがメモリ上で走り、ディスクには何も残りません。Microsoft Defenderがこの攻撃をどう検知するのか、検知はどこで限界に達するのか、そしてRunMRUハントと4つの防御レイヤーでその隙間をどう埋めるのかを解説します。","/posts/2026-09-21-clickfix-prevent-detect","posts/2026-09-21-clickfix-prevent-detect",[1609,1610,1611],"Defender","SOC","Endpoint Security",{"id":1613,"title":1614,"author":1615,"cta":494,"description":1182,"hideInRecent":484,"layout":1198,"meta":1616,"moment":1586,"path":1620,"stem":1621,"tags":1622,"webcast":484},"content_ja/posts/2026-09-21-red-tenant-dark-tenant-cio.md","管理業務と日常業務を1台のPCで。Game Overです。",[1391],{"lang":1200,"date":1586,"categories":1617,"blogtitlepic":1618,"customExcerpt":1619},[235],"head-game-over-en.jpg","CIOにとってテナントが1つでは足りない理由と、2つ目がめったに検討されない理由。Managed Red Tenantは管理業務をオフィス環境からアーキテクチャとして分離し、Managed Dark Tenantは防御が破られてもなお組織が動き続けられるようにします。それが運用モデル、SOCのシグナル、そしてNISG 2026による証明義務にとって何を意味するのかを解説します。","/posts/2026-09-21-red-tenant-dark-tenant-cio","posts/2026-09-21-red-tenant-dark-tenant-cio",[235,1623,1624,1625],"Privileged Access","Zero Trust","NIS2",{"id":1627,"title":1628,"author":1629,"cta":494,"description":1630,"hideInRecent":484,"layout":1198,"meta":1631,"moment":1632,"path":1637,"stem":1638,"tags":1639,"webcast":484},"content_ja/posts/2026-08-08-isg-germany-2026.md","4度のLeader。ISGドイツ調査2026のglueckkanja",[1418],"ISGは今年、調査の名称を変更しました。Microsoft Cloud EcosystemはMicrosoft AI and Cloud Ecosystemになり、名称とともに評価の尺度も移りました。問われるのはもはや、誰がMicrosoftプラットフォームを導入したかではなく、誰がCopilot、エージェント、AIワークロードを制御可能なかたちで運用しているかです。この新しい尺度によって当社の位置づけが変わることはありませんでした。ISG Provider Lens®調査ドイツ2026は、当社を4つのクアドラントでLeaderに位置づけています。Microsoft Productivity and Business Process ServicesとAzure Managed Servicesの、それぞれLarge MarketとMid Marketです。2021年、2023年、2024年、2025年に続き、ドイツでは5回目のLeader評価となります。スイスでのLeaderクアドラント入りはその2週間前でした。",{"lang":1200,"date":1632,"categories":1633,"blogtitlepic":1635,"customExcerpt":1636},"2026-08-08",[1634],"Corporate","head-isg-de-2026.png","ISG Provider Lens®調査2026は、ドイツにおいてglueckkanjaを4つのクアドラントでLeaderに位置づけました。Microsoft Productivity and Business Process ServicesとAzure Managed Servicesの、それぞれLarge MarketとMid Marketです。調査の名称はMicrosoft AI and Cloud Ecosystemに変わり、評価の尺度も移りました。AIとエージェントのワークロードを制御可能なかたちで運用できるかが問われています。","/posts/2026-08-08-isg-germany-2026","posts/2026-08-08-isg-germany-2026",[1640,1641],"Award","ISG",{"id":1643,"title":1644,"author":1645,"cta":494,"description":1646,"hideInRecent":484,"layout":1198,"meta":1647,"moment":1648,"path":1652,"stem":1653,"tags":1654,"webcast":484},"content_ja/posts/2026-07-31-isg-switzerland-2026.md","Rising StarからLeaderへ。ISGスイス調査2026のglueckkanja",[1418],"2024年に当社はglueckkanja Switzerland AGを設立し、ベルンのBahnhofplatz 10bにあるzentroomにオフィスを構えました。2025年、ISGはスイス市場で当社をRising Starに位置づけました。アナリストがLeaderクアドラントへの躍進を見込むベンダーという位置づけです。その躍進がいま記録されました。ISG Provider Lens®調査2026は、スイスにおいて当社をMicrosoft AI and Cloud Ecosystemクアドラントの、Azure Managed Services領域とMicrosoft Productivity and Business Process Services領域でLeaderに位置づけています。",{"lang":1200,"date":1648,"categories":1649,"blogtitlepic":1650,"customExcerpt":1651},"2026-07-31",[1634],"head-isg-ch-2026.png","ISG Provider Lens®調査2026は、スイスにおいてglueckkanjaをMicrosoft AI and Cloud Ecosystemクアドラントの、Azure Managed Services領域とMicrosoft Productivity and Business Process Services領域でLeaderに位置づけました。ベルンでの市場参入から2年、Rising Star選出から1年でのことです。","/posts/2026-07-31-isg-switzerland-2026","posts/2026-07-31-isg-switzerland-2026",[1640,1641],{"id":1656,"title":1657,"author":1658,"cta":494,"description":1182,"hideInRecent":484,"layout":1198,"meta":1659,"moment":1660,"path":1664,"stem":1665,"tags":1666,"webcast":484},"content_ja/posts/2026-07-24-outbreak-openai-hugging-face.md","Outbreak。OpenAI／Hugging Faceの事案が示すこと、示さないこと",[1391],{"lang":1200,"date":1660,"categories":1661,"blogtitlepic":1662,"customExcerpt":1663},"2026-07-24",[235],"head-outbreak.jpg","AIエージェントがテスト環境から脱出し、ゼロデイを見つけ、別の企業をハッキングする。映画の脚本のようですが、2026年7月に実際に起きました。冷静に位置づける時期です。少しの心理学、2人のセキュリティ専門家、そしてそれが自社の防御にとって何を意味するのかという問いとともに。","/posts/2026-07-24-outbreak-openai-hugging-face","posts/2026-07-24-outbreak-openai-hugging-face",[1667,1610,1624],"AI",{"id":1669,"title":1670,"author":1671,"cta":494,"description":1672,"hideInRecent":484,"layout":1198,"meta":1673,"moment":1674,"path":1678,"stem":1679,"tags":1680,"webcast":484},"content_ja/posts/2026-07-22-isg-cybersecurity-2026.md","LeaderそしてRising Star。ISGサイバーセキュリティ調査2026のglueckkanja",[1418],"新たに加わったクアドラントで、いきなりLeaderになりました。ISG Provider Lens®調査「Cybersecurity – Services and Solutions 2026」は、ドイツの中堅中小企業向けNext-Gen SOC/MDR Services分野でglueckkanjaをLeaderと位置づけています。Next-Gen SOC/MDR Servicesの全体市場では、ISGは当社をRising Starに選出しました。つまり、今後12か月から24か月のうちにLeaderクアドラントへ躍進するとアナリストが見込むベンダーだということです。",{"lang":1200,"date":1674,"categories":1675,"blogtitlepic":1676,"customExcerpt":1677},"2026-07-22",[1634],"head-isg-cybersecurity-2026.png","ISG Provider Lens®調査 Cybersecurity 2026は、glueckkanjaをNext-Gen SOC/MDR Services（Midmarket）クアドラントのLeaderに選出しました。Next-Gen SOC/MDR Servicesの全体市場では、当社はRising Starです。ISGは当社の平均を上回る成長、Microsoftセキュリティに関する深い専門性、そしてドイツ国内から提供する24時間365日のSOCを評価しています。","/posts/2026-07-22-isg-cybersecurity-2026","posts/2026-07-22-isg-cybersecurity-2026",[1640,1641,235],{"id":1682,"title":1683,"author":1684,"cta":494,"description":1685,"hideInRecent":484,"layout":1198,"meta":1686,"moment":1687,"path":1690,"stem":1691,"tags":1692,"webcast":484},"content_ja/posts/2026-07-06-the-holy-trinity.md","The Holy Trinity：AIが実際に働くために本当に必要なもの",[1418],"ある製造業の企業が、14,000あるSKUのうちどれが実際に利益を生んでいるのかを知りたいと考えました。答えは3つのシステムの中にありますが、それらは一度もデータを1件たりともやり取りしたことがありません。少し前までは、その答えを得るのに3つの部門、2週間、そして相当な善意が必要でした。2026年初頭からは、AIがこの問いに数分で答えられます。データを走査し、関連を結び、推奨を出す。ただし、アクセスできることが前提です。",{"lang":1200,"date":1687,"categories":1688,"blogtitlepic":1689},"2026-07-06",[131],"head-the-holy-trinity","/posts/2026-07-06-the-holy-trinity","posts/2026-07-06-the-holy-trinity",[1667,131],{"id":1694,"title":1695,"author":1696,"cta":494,"description":1697,"hideInRecent":484,"layout":1198,"meta":1698,"moment":1699,"path":1703,"stem":1704,"tags":1705,"webcast":484},"content_ja/posts/2026-07-01-onboarding-process.md","契約書にサインしたあと：当社のオンボーディングはこう進みます",[1509],"オンボーディングは実際どう進むのですか。応募者との会話で繰り返し受ける質問です。オンボーディングがぎくしゃくした経験を持つ人が少なくないからでしょう。だからこそ当社は、最初から安心してもらうことを大切にしています。",{"lang":1200,"date":1699,"categories":1700,"blogtitlepic":1701,"customExcerpt":1702},"2026-07-01",[1634],"Onboarding_Blogheader","契約書にサインが済み、大きな一歩は終わりました。では、ここからどうなるのでしょうか。PreBoardingからチームでの最初の1週間まで、当社のオンボーディングの舞台裏をご案内します。","/posts/2026-07-01-onboarding-process","posts/2026-07-01-onboarding-process",[1706,1707,1708],"Employer Branding","Onboarding","Unternehmenskultur",{"id":1710,"title":1711,"author":1712,"cta":494,"description":1713,"hideInRecent":484,"layout":1198,"meta":1714,"moment":1715,"path":1719,"stem":1720,"tags":1721,"webcast":484},"content_ja/posts/2026-06-26-frontier-partner.md","Microsoft Frontier Partner：当社もその一員です",[1418],"Microsoftのパートナーエコシステムには数多くの表彰がありますが、Frontier Partner Badgeはその成り立ちにおいて他の称号と一線を画します。申請することはできず、Microsoft側の主導で、ごく限られたパートナーに授与されます。対象となるには、1つの領域で秀でるのではなく、複数の領域で同時に実力を示さなければなりません。Microsoftが確認するのは、Cloud & AI Platforms、AI Business Solutions、そしてSecurityにおける実証済みの能力です。つまり対象は、AIを既存のITへの後付けではなく、IDからエンドポイント、そして本番のAI運用までを貫くアーキテクチャの帰結として捉えている企業です。",{"lang":1200,"date":1715,"categories":1716,"blogtitlepic":1717,"customExcerpt":1718},"2026-06-26",[1634],"head-frontier-partner-badge.jpg","最近、Microsoft AI Cloud Partner Programに新たな最高位の称号としてFrontier Partner Badgeが設けられました。Microsoftがこれを授与するのは、ワークプレイスからクラウドプラットフォーム、セキュリティ、そしてAIアプリケーションそのものに至るまで、Microsoftスタック全体でAIプロジェクトを確実に届けられると実績で示した、世界でもごく限られたパートナーだけです。DACH圏でこのグループに属するのは数社にすぎず、当社はそのうちの1社です。","/posts/2026-06-26-frontier-partner","posts/2026-06-26-frontier-partner",[1640,1722,1667],"Microsoft Partner",{"id":1724,"title":1725,"author":1726,"cta":494,"description":1727,"hideInRecent":484,"layout":1198,"meta":1728,"moment":1729,"path":1733,"stem":1734,"tags":1735,"webcast":484},"content_ja/posts/2026-06-09-vair-run.md","チャリティのために160キロ",[1516],"日曜の朝8時30分、マイン川沿いのHolbeinsteg。おそろいのNinjaCatシャツを着た11人の同僚が、Frankfurter Rundenのスタートに並びました。雨も雷鳴も込みです。良いことのために走るという動機は、悪天候でもランニングシューズの紐を結ぶのに十分でした。",{"lang":1200,"date":1729,"categories":1730,"blogtitlepic":1731,"customExcerpt":1732},"2026-06-08",[1634],"frankfurter-runden.png","同僚11人、16周、160キロ、雷雨、そして表彰台。glueckkanjaはFrankfurter Runden 2026に参加し、走った1周ごとにVAIR e.V.へ寄付しました。同団体はオフェンバッハでインクルーシブなスポーツ・カルチャーパークを建設しています。","/posts/2026-06-09-vair-run","posts/2026-06-09-vair-run",[1736,1706,1737],"Top Arbeitgeber","Soziales Engagement",{"id":1739,"title":1740,"author":1741,"cta":494,"description":1742,"hideInRecent":484,"layout":1198,"meta":1743,"moment":1744,"path":1748,"stem":1749,"tags":1750,"webcast":484},"content_ja/posts/2026-04-10-incident-to-intelligence.md","未知のAMOSスティーラーの解剖：アラートから免疫獲得まで数時間",[1497],"当社のSOCでアラートが発報すると、そこから時計が動き始めます。対象となったお客様だけでなく、当社の保護下にあるすべての組織にとってです。現代の脅威環境で最も危険な瞬間はインテリジェンス・ギャップ、つまり新しいマルウェア亜種が最初に投入されてから、業界がその存在を知る日までの時間の窓です。",{"lang":1200,"date":1744,"categories":1745,"blogtitlepic":1746,"customExcerpt":1747},"2026-04-10",[235],"head-amos-stealer.png","これまで文書化されていなかったAMOSスティーラーの亜種が、macOSエンドポイントを侵害しました。既知のハッシュはなく、公開データベースにC2データもありません。当社のSOCは6層の難読化を解体し、すべての指標を抽出したうえで、業界がこの検体を目にするよりも前に、数時間以内ですべてのSOCのお客様へ保護を配布しました。","/posts/2026-04-10-incident-to-intelligence","posts/2026-04-10-incident-to-intelligence",[1751,1752,1753,1754,1755],"Threat Intelligence","Incident Response","macOS Security","Malware Analysis","Cyber Security Operations Center",{"id":1757,"title":1758,"author":1759,"cta":494,"description":1760,"hideInRecent":484,"layout":1198,"meta":1761,"moment":1762,"path":1765,"stem":1766,"tags":494,"webcast":484},"content_ja/posts/2026-03-21-microsoft-edge-corporate-browser.md","Edgeを唯一の社内標準ブラウザーにすべき理由",[1288],"企業環境におけるブラウザーの選定は戦略的な判断です。セキュリティの水準と運用の手間を直接左右します。長らくGoogle Chromeが自然な選択肢でしたが、Microsoft Edgeは既存のスタックに直接組み込まれるブラウザーへと進化しました。特にMicrosoft 365を利用し、管理をIntuneで行っている環境ではその効果が大きくなります。",{"lang":1200,"date":1762,"blogtitlepic":1763,"customExcerpt":1764},"2026-03-21","head-microsoft-edge-default-browser.jpg","Chromeを本気で選んだ企業はほとんどありません。独自の同期ロジック、独自のアカウント管理、独自のポリシー画面を抱えたまま、ただそこにあっただけです。一方でMicrosoft Edgeは、すでに動いているインフラ、つまりEntra ID、Intune、Defenderに直接組み込まれます。本記事では、移行がどのようなものか、IntuneのポリシーでどのようにChromeをランディングページへリダイレクトするか、そして2つのブラウザーを並行運用するのをやめると何が不要になるかを紹介します。","/posts/2026-03-21-microsoft-edge-corporate-browser","posts/2026-03-21-microsoft-edge-corporate-browser",{"id":1768,"title":1769,"author":1770,"cta":494,"description":1771,"hideInRecent":484,"layout":1198,"meta":1772,"moment":1773,"path":1777,"stem":1778,"tags":1779,"webcast":484},"content_ja/posts/2026-03-20-stryker-attack-intune-privilege.md","必要だったのは管理者アカウント1つだけでした",[1391],"2026年3月11日水曜日。79か国のStrykerのオフィスで従業員がPCの電源を入れると、中身は空でした。ログイン画面はロゴに置き換わっていました。社用ノートPC、社用スマートフォン、そして同社のBYODプログラムに登録されていた私物端末まで、すべてが一夜のうちに同時に消去されました。ランサムウェアもマルウェアのシグネチャも、エンドポイント検知ツールが捉えられるものは何もありませんでした。",{"lang":1200,"date":1773,"categories":1774,"blogtitlepic":1775,"customExcerpt":1776},"2026-03-20",[235],"head-stryker.jpg","2026年3月11日、Handalaは79か国の端末を消去しました。そのために必要だったのは、侵害されたIntuneの管理者アカウント1つだけです。マルウェアもエクスプロイトもなく、正規の管理ツールが所有者自身に向けられました。何が起きたのか、なぜそれが通用したのか、そして塞ぐべき2つのアーキテクチャ上の穴について説明します。","/posts/2026-03-20-stryker-attack-intune-privilege","posts/2026-03-20-stryker-attack-intune-privilege",[1780,71,1623,1624],"Red Tenant",{"id":1782,"title":1783,"author":1784,"cta":494,"description":1785,"hideInRecent":484,"layout":1198,"meta":1786,"moment":1787,"path":1791,"stem":1792,"tags":1793,"webcast":484},"content_ja/posts/2026-03-16-ai-agent-hackathon.md","6つのAgent。4週間。実際の運用へ。",[1418],"自社のIT部門は、Agentなら数分で片づく作業に毎週何時間を費やしているでしょうか。",{"lang":1200,"date":1787,"categories":1788,"blogtitlepic":1789,"customExcerpt":1790},"2026-03-16",[1634],"head-ai-agent-hackathon.jpg","6社、4週間のビルドフェーズ、6つの動作するAI Agent。これが第1回glueckkanja AI Agent Hackathonの成果です。Kiekert、Dr. Oetker、Eckes-Granini、igefa、lila logistikがCopilot StudioでAgentを構築し、それらは現在すでに本番で稼働しています。そこで何が生まれ、この形式がどのように機能するのかを紹介します。","/posts/2026-03-16-ai-agent-hackathon","posts/2026-03-16-ai-agent-hackathon",[1667,1794,1795,1796],"Copilot Studio","Hackathon","AI Agents",{"Karsten Kleinschmidt":1798,"Fritz Zurhorst":1799,"Nadine Klein":1800,"Jan Geisbauer":1801,"Carolin Kanja":1805,"Anna Ulbricht":1806,"Annette Brauns":1807,"Pascal Asch":1808,"Steffen Schwerdtfeger":1809},{"display_name":1257,"avatar":1258,"permalink":1259,"twitter":1260,"linkedin":1261,"imageOffsetTop":1262,"imageOffsetLeft":1263},{"display_name":1231,"avatar":1232,"permalink":1233,"linkedin":1234,"imageOffsetTop":1235},{"display_name":1251,"avatar":1252,"permalink":1253,"twitter":1254,"linkedin":1255,"imageOffsetTop":1235},{"display_name":1391,"avatar":1392,"permalink":1393,"twitter":1394,"linkedin":1394,"imageOffsetTop":1235,"socials":1802},[1803,1804],{"text":1397,"href":1398},{"text":1400,"href":1401},{"display_name":1418,"avatar":1419,"permalink":1420,"twitter":1421,"linkedin":1422},{"display_name":1509,"avatar":1510,"permalink":1511,"linkedin":1512,"imageOffsetTop":1513,"imageOffsetLeft":1514},{"display_name":1516,"avatar":1517,"permalink":1518,"linkedin":1519,"imageOffsetTop":1520,"imageOffsetLeft":1262},{"display_name":1497,"avatar":1498,"permalink":1499,"linkedin":1500,"imageOffsetTop":1334},{"display_name":1288,"avatar":1289,"permalink":1290,"linkedin":1291,"twitter":1292,"imageOffsetTop":1293,"imageOffsetLeft":1294},{"id":1226,"extension":1227,"meta":1811,"stem":8,"__hash__":1578},{"Thorsten Kunzi":1812},{"display_name":523,"avatar":1306,"permalink":1307,"twitter":1246,"linkedin":1299,"imageOffsetTop":1235},1791383937172]