Configuring Credential Guard

Windows Defender Credential Guard, as the name suggests, is a new Windows 10 security feature whose task is to protect credentials from theft. It does so by separating the user credentials from the rest of the operating system in order to block access to credentials stored in the Local Security Authority (LSA). But what is LSA? It has to do with the user authentication by Active Directory Domain Services (AD DS) in an organization's network. Usually, in a domain environment, a user provides the username and the password to a domain controller. In the backend of the domain controller, it is Kerberos that takes care of the user's successful authentication once the requirements are met. As a result, Kerberos grants an authentication ticket to the user's computer, which then uses that ticket to access the network services by establishing...