Page 163 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
Microsoft states: “This topic covers the steps necessary to upgrade an existing forest or domain to Windows Server 2012, using either Server Manager or Windows PowerShell.”
Read the explainer
Microsoft states: “This section focuses on technical controls to implement to reduce the attack surface of the Active Directory installation.”
Read the guide
Microsoft states: “Active Directory Domain Services (AD DS) deployment in Windows Server 2012 is simpler and faster than previous versions of Windows Server.”
Read the playbook
Microsoft states: “Understand how a Microsoft account works to enhance security and privacy for users and how you can manage consumer account types in your organization.”
Read the briefing
Microsoft states: “Excessive Local Security Authority (LSA) Account Name and Account security identifiers (SID) lookups can contribute to Active Directory performance degradation.”
Read the checklist
Microsoft states: “Domain controller location refers to the algorithm the client machine uses to find a suitable domain controller.”
Read the explainer
Microsoft states: “This shared forest, called the initial organizational forest, is the foundation of the forest design model for the organization.”
Read the guide
Microsoft states: “This article describes the parameters and options that the dcpromo answer file uses to install and remove Active Directory Domain Services (AD DS) on domain controllers.”
Read the playbook
Microsoft states: “LDAP over SSL (LDAPS) encrypts LDAP communications between clients and domain controllers using SSL/TLS certificates.”
Read the briefing
Microsoft states: “During a Windows Update, there are user specific processes that must happen for the update to be complete.”
Read the checklist