Active Directory has been around for almost 25 years. As such, one might expect that – by now – we would have figured out to keep it safe against attacks. Yet, it remains a weak point in many organizations’ cybersecurity defenses. When coupled with the challenges mentioned above, this can be a recipe for disaster. Why is this the case?