What is Active Directory tiering and why it matters
Free2026-10-15
The problem
When one admin account can log on everywhere, one stolen credential can compromise the whole domain.
The idea
Split your environment into tiers and never let an account from a higher tier sign in to a lower one.
| Tier | Contains | Example admins |
|---|---|---|
| Tier 0 | Domain controllers, identity systems | Domain admins |
| Tier 1 | Servers and applications | Server admins |
| Tier 2 | Workstations and users | Helpdesk |