You Can Fire Active Directory. Can You Take the Keys Back?

The Identity Blueprint · Jul 28, 2026 · 1h 4m

By the end of this episode, you'll know exactly how a source-of-authority cutover happens without service disruption, and how to lock down every sensitive admin group so standing privilege — the thing attackers actually rely on — simply doesn't exist anymore.In this episode, Ernie and Josée go deep on the actual mechanics: the metadata flip that switches an object's source of authority without touching a single running session, why Cloud Kerberos Trust lets a pure cloud device walk into a legacy file share the domain controller has never heard of, and the June 2026 fix that closed a real…