Powershell
Active Directory Security Baselines as Idempotent Scripts
Tiered admin, ACL hardening, Protected Users, AdminSDHolder the AD security controls that matter, encoded as Get/Test/Set scripts that audit first and enforce second.


