https://www.sharitsec.eu.org/2023/08/securely-implementing-active-directory.html