Active Directory hygiene for small teams (without buying a platform)

Active Directory is where a quiet security posture lives or dies. Most of the hygiene that matters does not need a new platform or a six-figure SIEM — it needs a short weekly checklist and someone who actually runs it. Here are the seven habits that kept things clean in the environments I have worked in.