Page 166 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
Microsoft states: “However, it has not undergone the same editing passes, so some of the language may seem less polished than what is typically found on TechNet.”
Read the explainer
Microsoft states: “After you create your Active Directory forest and domain designs, you must design a Domain Name System (DNS) infrastructure to support your Active Directory logical structure.”
Read the guide
Microsoft states: “On all versions of Windows currently in mainstream support, the local Administrator account is disabled by default, which makes the account unusable for pass-the-hash and other credential theft attacks.”
Read the playbook
Microsoft states: “Before you can raise domain and forest functional levels, evaluate your current environment and identify your target functional level.”
Read the briefing
Microsoft states: “The steps up to this point apply to all forests: find a valid backup for each domain, recover the domains in isolation, reconnect them, reset the global catalog, and clean up.”
Read the checklist
Microsoft states: “This article for IT professionals introduces the group Managed Service Account (gMSA) by describing practical applications, changes in Microsoft’s implementation, and hardware and software requirements.”
Read the explainer
Microsoft states: “Windows Server 2008 uses site information for many purposes, including routing replication, client affinity, system volume (SYSVOL) replication, Distributed File System Namespaces (DFSN), and service location.”
Read the guide
Microsoft states: “The following document discusses prerequisites that you should be familiar with before devising a forest recovery plan or attempting a recovery.”
Read the playbook
Microsoft states: “Account organizational units (OUs) contain user, group, and computer objects.”
Read the briefing
Microsoft states: “You can review the following set of changes to help understand and prepare for the schema updates performed by adprep /domainprep in Windows Server.”
Read the checklist