Page 170 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
Microsoft states: “You can set up Windows Local Administrator Password Solution (Windows LAPS) to honor legacy Microsoft LAPS Group Policy settings, but with some restrictions and limitations.”
Read the explainer
Microsoft states: “Are your clients unable to connect to your DNS server using DoH, or are encrypted DNS queries failing without a clear reason?”
Read the guide
Microsoft states: “You can use this topic to learn about DNS Policy, which is new in Windows Server 2016.”
Read the playbook
Microsoft states: “DNSSEC (Domain Name System Security Extensions) protects DNS zones from tampering and ensures data integrity by adding cryptographic signatures to DNS records.”
Read the briefing
Microsoft states: “Note: For information on how to use DNS Policy for split-brain DNS deployment with Active Directory integrated DNS Zones, see Use DNS Policy for Split-Brain DNS in Active Directory.”
Read the checklist
Microsoft states: “DNSSEC resource records are used to validate and secure DNS responses.”
Read the explainer
Microsoft states: “Aging and scavenging remove stale resource records that accumulate in zone data over time.”
Read the guide
Microsoft states: “Domain Name System (DNS) is essential for translating domain names into IP addresses, enabling network connectivity and resource access.”
Read the playbook
Microsoft states: “Important: This scenario illustrates how to deploy DNS policy for geo-location based traffic management when you are using only primary DNS servers.”
Read the briefing
Microsoft states: “You can use this topic to learn how to distribute application traffic across different geographically distributed instances of an application by using DNS policies that are based on the time of day.”
Read the checklist