Trainer Michael Grafnetter – EY Academy of Business

Michael Grafnetter

Windows Security Expert at CQURE

Michael is an expert on Windows Security, Microsoft Azure and PowerShell. He holds a master’s degree in Software Engineering and in early 2021 he was awarded the Microsoft Most Valuable Professional title in the Microsoft Azure Category.

Michael is an author of the open-source Directory Services Internals (DSInternals) PowerShell module and Thycotic Weak Password Finder, tools used by security auditors and penetration testers worldwide. His unique DSInternals Framework exposes many undocumented Active Directory security features, and it has already been integrated into multiple 3rd party solutions for Identity Management and Active Directory Disaster Recovery.

He started his career as a web application developer, but his focus soon shifted to system administration and information security. He was responsible for many projects like Novell to Windows migration, VMware vSphere deployment, Zero-touch deployment of Windows desktops, Application packaging, PKI deployment or Identity management with Microsoft FIM. In the role of a security consultant, he has performed multiple Active Directory security audits at large enterprises, primarily financial institutions, while utilizing both his own and 3rd party toolsets.

Michael enjoys passing on his knowledge. During his 10+ year teaching career, Michael has delivered hundreds of Windows-related trainings for IT professionals. He also used to lecture at the Charles University in Prague, where he was voted by students of the Faculty of Mathematics and Physics as one of their favorite teachers. He also gives public tech talks at various conferences and events, and in 2016 he was given the MVP award by Microsoft for sharing his knowledge with the community.

In his free time, Michael likes building his own IoT devices. His favorite pastimes also include cycling, hillwalking and ballroom dancing.

Areas of Michael’s technical specializations:

  • Active Directory (AD DS);
  • Azure Active Directory (AAD);
  • Microsoft Advanced Threat Analytics (ATA);
  • Windows-based PKI (AD CS);
  • Active Directory Federation Services (AD FS);
  • Microsoft Identity Manager (MIM);
  • PowerShell scripting and module development;
  • Programming in C#.


Highest Level Certifications:

1. Microsoft Azure Most Valuable Professional (MVP);

2. Microsoft Certified Trainer (MCT);

3. Certified EC-Council Instructor (CEI);

4. Microsoft Certified Professional (MCP);

5. PowerShell MVP Alumnus.