Get-ADAccountResultantPasswordReplicationPolicy: inventory adaccount resultant password replication policy
Microsoft states: “Gets the resultant password replication policy for an Active Directory account.”
Read the explainerDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 172 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
3,000 articlesGuidance and analysis from DSE
Set-ADReplicationConnection: change adreplication connection with before-and-after evidence
Microsoft states: “The Set-ADReplicationConnection cmdlet sets properties on Active Directory replication connections.”
Read the guide
Add-ADFineGrainedPasswordPolicySubject: stage additions to adfine grained password policy subject with bounded evidence
Microsoft states: “Applies a fine-grained password policy to one more users and groups.”
Read the playbook
Set-ADReplicationSiteLinkBridge: change adreplication site link bridge under AD/DNS change control
Microsoft states: “Sets the properties of a replication site link bridge in Active Directory.”
Read the briefing
Remove-ADDomainControllerPasswordReplicationPolicy: remove addomain controller password replication policy with rollback checks
Microsoft states: “Removes users, computers, and groups from the allowed or denied list of a read-only domain controller password replication policy.”
Read the checklist
Remove-ADFineGrainedPasswordPolicySubject: remove adfine grained password policy subject against recorded identity and DNS state
Microsoft states: “Removes one or more users from a fine-grained password policy.”
Read the explainer
New-ADReplicationSiteLink: create adreplication site link with before-and-after evidence
Microsoft states: “Creates a new Active Directory site link for in managing replication.”
Read the guide
Get-ADUserResultantPasswordPolicy: inventory aduser resultant password policy with bounded evidence
Microsoft states: “The Get-ADUserResultantPasswordPolicy cmdlet gets the resultant password policy object (RSoP) for a user.”
Read the playbook
Set-ADCentralAccessPolicy: change adcentral access policy under AD/DNS change control
Microsoft states: “The Set-ADCentralAccessPolicy cmdlet can be used to modify a central access policy in Active Directory.”
Read the briefing
Set-ADUser: change aduser with rollback checks
Microsoft states: “The Set-ADUser cmdlet modifies the properties of an Active Directory user.”
Read the checklist