New-ADUser: create aduser against recorded identity and DNS state
Microsoft states: “You can set commonly used user property values by using the cmdlet parameters.”
Read the explainerDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 173 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
3,000 articlesGuidance and analysis from DSE
Set-ADComputer: change adcomputer with before-and-after evidence
Microsoft states: “The Set-ADComputer cmdlet modifies the properties of an Active Directory computer object.”
Read the guide
New-ADComputer: create adcomputer with bounded evidence
Microsoft states: “The New-ADComputer cmdlet creates a new Active Directory computer object.”
Read the playbook
New-ADServiceAccount: create adservice account under AD/DNS change control
Microsoft states: “Creates a new Active Directory managed service account or group managed service account object.”
Read the briefing
Set-ADServiceAccount: change adservice account with rollback checks
Microsoft states: “Modifies an Active Directory managed service account or group managed service account object.”
Read the checklist
Set-ADObject: change adobject against recorded identity and DNS state
Microsoft states: “The Set-ADObject cmdlet modifies the properties of an Active Directory object.”
Read the explainer
Set-ADOrganizationalUnit: change adorganizational unit with before-and-after evidence
Microsoft states: “The Set-ADOrganizationalUnit cmdlet modifies the properties of an Active Directory organizational unit (OU).”
Read the guide
Get-ADObject: inventory adobject with bounded evidence
Microsoft states: “The Get-ADObject cmdlet gets an Active Directory object or performs a search to get multiple objects.”
Read the playbook
Set-ADGroup: change adgroup under AD/DNS change control
Microsoft states: “The Set-ADGroup cmdlet modifies the properties of an Active Directory group.”
Read the briefing
New-ADClaimTransformPolicy: create adclaim transform policy with rollback checks
Microsoft states: “Creates a new claim transformation policy object in Active Directory.”
Read the checklist