Attribution

This website is authored by Sanjay Tandon, former Program Manager for Active Directory Security at Microsoft Corp.

Tandon was Microsoft Corporation's first Program Manager for Active Directory Security on Microsoft's Windows Server Development Team (2001-2004.) In 2005, Tandon transitioned to the Threat and Risk Assessment Team at Microsoft IT where he single-handedly conducted a risk assessment of Microsoft's own global Active Directory infrastructure.

Tandon is also the author of Microsoft's first official whitepaper on managing privileged access in Active Directory, titled Best Practices for Delegating Administrative Access in Active Directory.

He is the architect and lead developer of the world's most advanced, Microsoft-endorsed Active Directory security tooling, including the world's first and only accurate Active Directory Effective Permissions Calculator, Active Directory Effective Access Auditor, Active Directory Privileged Access Assessor and Active Directory Privilege Escalation Path Identifier.

With 20,000+ hours of experience, he is the world's most knowledgable subject matter expert in Active Directory Security, and his intellectual property (IP), embodied in U.S. Patent 8429708, governs the determination of access entitlements, including the determinaton of privileged access and the determinaton of privilege escalation paths in Active Directory.

Today his pioneering patent in access assessment is cited by 70+ patents from the world's top cyber security companies including Microsoft, EMC, CyberArk, SailPoint, FireEye, Dell, McAfee, VMWare, Palantir, IBM, Amazon and many others.

Over the last twenty years, his contributions to the subject have helped enhance Active Directory Security at thousands of organizations worldwide, including at Microsoft, the U.S. Department of Defense, the U.S. Treasury and many others.