notes for AD security