Last week, security expert, SwiftOnSecurity introduced OrgKit on Twitter. It is a new way to run a complete and configured company or business across Microsoft Active Directory, Group Policy, Azure Active Directory, and Office 365.
Why was OrgKit created?
The whole Microsoft ecosystem was designed to be customized per-organization as per needs. That is why a complete repository of Microsoft product configuration guidance, documents for organizations is so rare.
Majority of organizations are unequipped to understand what this really means. There is a diverse configuration history among companies that use these Microsoft services. With this comes the need to support these many different configuration types. This prevented Microsoft from providing generic defaults and guidance for setting things up.
What is OrgKit for?
It is designed to provide users with a series of templates that can set up a new well-documented IT environment ideally for a mid-size organization. It can serve as a public example of what’s possible, and allow companies to make informed decisions. These companies are mostly the ones who lack the security knowledge or are not aware as to what other businesses are doing.
This is meant for a company that has to start-over after a full network compromise, or creating a new subsidiary business.
Usage of Powershell DSC
To build and maintain a Windows environment having a centralized design to support all the necessary tools, Powershell DSC is the ideal tool. It provides a good set of abilities and most likely will be a part of the future versions of OrgKit. Currently, OrgKit aims to help Windows administrators who are already dealing with and trying to cope up with many new technologies and concepts. They need to run the system long term with other employees.
Powershell DSC is considered to be a specialized skill that can revert actions done outside its own central control. Using it requires buy-in of the whole-organization. Hence, the kind of use-cases for OrgKit cannot depend on it.
To check out the repository, head over to GitHub.
Read next
Microsoft announces official support for Windows 10 to build 64-bit ARM apps