Page 161 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
Microsoft states: “To check Domain Name System (DNS) settings that might interfere with Active Directory replication, you can begin by running the basic test that ensures that DNS is operating properly for your domain.”
Read the explainer
Microsoft states: “Law #3: If a bad actor has unrestricted physical access to your computer, it’s not your computer anymore. - Ten Immutable Laws of Security (Version 2.0).”
Read the guide
Microsoft states: “This article covers the Windows audit policy settings and Microsoft’s baseline and advanced recommendations for both workstations and servers.”
Read the playbook
Microsoft states: “Attacks against computing infrastructure have increased over the last decade in all parts of the world.”
Read the briefing
Microsoft states: “This article describes symptoms, cause and resolution steps for Active Directory operations that fail with Win32 error 1753: "There are no more endpoints available from the endpoint mapper."”
Read the checklist
Microsoft states: “Law Number Ten: Technology isn’t a panacea. - 10 Immutable Laws of Security Administration).”
Read the explainer
Microsoft states: “Windows PowerShell for Active Directory includes the ability to manage replication, sites, domains and forests, domain controllers, and partitions.”
Read the guide
Microsoft states: “Together, these features protect LDAP traffic in AD DS environments from tampering, replay attacks, and unauthorized access.”
Read the playbook
Microsoft states: “This topic explains the AD DS replication and topology management cmdlets in more detail, and provides additional examples.”
Read the briefing
Microsoft states: “The recommended way to upgrade a domain is to promote domain controllers that run newer versions of Windows Server and demote older domain controllers as needed.”
Read the checklist