Get-ADAuthenticationPolicySilo: inventory adauthentication policy silo against recorded identity and DNS state
Microsoft states: “Gets one or more Active Directory Domain Services authentication policy silos.”
Read the explainerDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 174 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
3,000 articlesGuidance and analysis from DSE
Get-ADDomainControllerPasswordReplicationPolicyUsage: inventory addomain controller password replication policy usage
Microsoft states: “Gets the Active Directory accounts that are authenticated by a read-only domain controller or that are in the revealed list of the domain controller.”
Read the guide
New-ADAuthenticationPolicy: create adauthentication policy with bounded evidence
Microsoft states: “The New-ADAuthenticationPolicy creates an authentication policy object in Active Directory® Domain Services.”
Read the playbook
Get-ADReplicationUpToDatenessVectorTable: inventory adreplication up to dateness vector table under AD/DNS change control
Microsoft states: “Displays the highest Update Sequence Number (USN) for the specified domain controller.”
Read the briefing
Get-ADComputer: inventory adcomputer with rollback checks
Microsoft states: “The Get-ADComputer cmdlet gets a computer or performs a search to retrieve multiple computers.”
Read the checklist
Set-ADAccountControl: change adaccount control against recorded identity and DNS state
Microsoft states: “Modifies user account control (UAC) values for an Active Directory account.”
Read the explainer
Get-ADUser: inventory aduser with before-and-after evidence
Microsoft states: “The Get-ADUser cmdlet gets a specified user object or performs a search to get multiple user objects.”
Read the guide
Get-ADReplicationQueueOperation: inventory adreplication queue operation with bounded evidence
Microsoft states: “Returns the contents of the replication queue for a specified server.”
Read the playbook
Scope ActiveDirectory in observed AD/DNS state
Microsoft states: “The Active Directory module for Windows PowerShell is a PowerShell module that consolidates a group of cmdlets.”
Read the briefing
Get-ADDomainController: inventory addomain controller with rollback checks
Microsoft states: “Gets one or more Active Directory domain controllers based on discoverable services criteria, search parameters or by providing a domain controller identifier, such as the NetBIOS name.”
Read the checklist