Stage Enable DNS over HTTPS in DNS Server on Windows Server with AD/DNS rollback checks
Microsoft states: “This article explains how to enable DNS over HTTPS (DoH) in the DNS Server service running on Windows Server.”
Read the explainerDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 171 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
3,000 articlesGuidance and analysis from DSE
Set-ADFineGrainedPasswordPolicy: change adfine grained password policy with before-and-after evidence
Microsoft states: “The Set-ADFineGrainedPasswordPolicy cmdlet modifies the properties of an Active Directory fine-grained password policy.”
Read the guide
Set-ADReplicationSite: change adreplication site with bounded evidence
Microsoft states: “The Set-ADReplicationSite cmdlet is used to set the properties for an Active Directory site that is being used for replication.”
Read the playbook
Set-ADAuthenticationPolicy: change adauthentication policy under AD/DNS change control
Microsoft states: “The Set-ADAuthenticationPolicy cmdlet modifies the properties of an Active Directory® Domain Services authentication policy.”
Read the briefing
Get-ADFineGrainedPasswordPolicy: inventory adfine grained password policy with rollback checks
Microsoft states: “The Get-ADFineGrainedPasswordPolicy cmdlet gets a fine-grained password policy or performs a search to retrieve multiple fine-grained password policies.”
Read the checklist
Set-ADReplicationSiteLink: change adreplication site link against recorded identity and DNS state
Microsoft states: “The Set-ADReplicationSiteLink cmdlet sets properties on an Active Directory site link.”
Read the explainer
Set-ADClaimTransformPolicy: change adclaim transform policy with before-and-after evidence
Microsoft states: “Sets the properties of a claims transformation policy in Active Directory.”
Read the guide
Set-ADDefaultDomainPasswordPolicy: change addefault domain password policy with bounded evidence
Microsoft states: “Modifies the default password policy for an Active Directory domain.”
Read the playbook
New-ADReplicationSite: create adreplication site under AD/DNS change control
Microsoft states: “The New-ADReplicationSite cmdlet is used to create sites in Active Directory replication.”
Read the briefing
Set-ADAuthenticationPolicySilo: change adauthentication policy silo with rollback checks
Microsoft states: “Modifies an Active Directory Domain Services authentication policy silo object.”
Read the checklist