Search Results

1. Purpose This policy outlines DTC’s baseline security protections that can be universally applied with minimal end-user impact. These protections represent the default security posture DTC offers across systems, while additional or advanced protections ma...

5.1 Identity Management User Lifecycle Management: a. Provision unique identifiers for all users and devices.​ b. Deactivate user accounts after 1 year of inactivity.​ c. Disable local administrator accounts after 90 days of inactivity.​ ...

5.2 Compute Resources Role-Based Access Control (RBAC): a. DTC retains and manages credentials for Built-In Administrator, Domain Administrator, and dtcadminaccounts.​ b. DTC creates unique administrator accounts for client-designated decision-m...

5.5 Workstations & Endpoints Configuration Standards: a. Disable Windows Management Instrumentation (WMI), PowerShell, and Secure Shell (SSH) on workstations. SSH may be temporarily enabled by a DTC technician for troubleshooting and disabled upon ...

6. Additional Services and Clarifications This Baseline Security Protections Policy outlines the standard security measures implemented by DTC. Services or protections not specified herein fall into the following categories:​ Additional Add-Ons: Some s...

5.4 Network Security a. All remote access is delivered via a Console Remote Access Solution or Network Remote Access solution (i.e., overlay network tunnels) with a Multi-Factor Authentication (MFA) enforcement feature for each end user. b. DTC con...

5.3 Data Protection Endpoints: a. Encrypt all Windows servers equipped with a Trusted Platform Module (TPM) using BitLocker with default settings.​ b. Encrypt all Storage Area Networks (SANs) utilizing their latest firmware's default encryptio...

Glossary of Abbreviations ACL: Access Control List​Cyber Readiness Center+1HackerCombat+1 ADUC: Active Directory Users and Computers​cloudsecurelab.github.io+6Interlaced+6Webopedia+6 AES: Advanced Encryption Standard​ API: Application Progr...

We ensure this is always on.https://techcommunity.microsoft.com/blog/windows-itpro-blog/get-started-with-quick-machine-recovery-in-windows/4398487

Overview DTC Inc. holds all vendors to a high standard, especially those providing products, platforms, or services critical to our operations, client delivery, or infrastructure. This document outlines our baseline requirements for security, technical intero...

📘 Purpose This guide helps DTC team members properly document and migrate non-client-specific technical knowledge into Bookstack. This ensures consistent formatting, easy access, and high value for internal teams. Note: Bookstack is the official place for gen...

What Is “Top Level” in HaloPSA? Definition “Top Level” is a custom, extra organizational field in HaloPSA that lets you group Clients however you like. How We Use It at DTC We combine two pieces of information into every client’s Top Level: Industry (e.g....

This is the go-to place for all things DTC tech — from everyday IT basics to advanced specialties. You'll find professional, reliable documentation and insights that power our teams and keep us on point. Can't see some documents or getting "page not found" err...

DTC's network architecture is built on firewall-centric design with complete network segmentation. The firewall handles DNS, DHCP, routing, IPS, and traffic visibility. Every device starts isolated and communicates only through explicitly permitted paths. Core...

DTC's DNS and DHCP architecture is built around one principle: the firewall is the sole DNS and DHCP server for every device on the network. No device points directly to a domain controller, external DNS, or any other DNS server. This decouples internet uptime...

Console/Support Access Primary tool: NinjaRemote (integrated with NinjaOne RMM) Quick support for end users and technician console access No permanent access required... on-demand connections Audit trail maintained through NinjaOne Site-to-Site VPN Used for ...

This document provides a comprehensive overview of the workstation configuration and optimization scripts in the enhancement/workstation-standards feature branch. Overview These PowerShell scripts are designed for MSP deployment via RMM platforms to standard...

You probably recognize this screen, if not a screenshot is below. This is what to do when you see the Bitlocker Recovery Screen!Bitlocker Recovery Key Entry Guide When you see the blue "Bitlocker recovery" screen: Step 1: Press Esc to open more recovery opti...