Get-ADGroup: inventory adgroup against recorded identity and DNS state
Microsoft states: “The Get-ADGroup cmdlet gets a group or performs a search to retrieve multiple groups from an Active Directory.”
Read the explainerDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 175 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
3,000 articlesGuidance and analysis from DSE
Get-ADReplicationPartnerMetadata: inventory adreplication partner metadata with before-and-after evidence
Microsoft states: “Returns the replication metadata for a set of one or more replication partners.”
Read the guide
Get-ADCentralAccessPolicy: inventory adcentral access policy with bounded evidence
Microsoft states: “The Get-ADCentralAccessPolicy cmdlet retrieves central access policies from Active Directory.”
Read the playbook
Get-ADTrust: inventory adtrust under AD/DNS change control
Microsoft states: “The Get-ADTrust cmdlet returns all of the trusted domain objects in the directory.”
Read the briefing
Get-ADReplicationSubnet: inventory adreplication subnet with rollback checks
Microsoft states: “The Get-ADReplicationSubnet cmdlet gets a specific Active Directory subnet or a set of subnets based on a specified filter.”
Read the checklist
Get-ADReplicationAttributeMetadata: inventory adreplication attribute metadata against recorded identity and DNS state
Microsoft states: “Gets the replication metadata for one or more Active Directory replication partners.”
Read the explainer
Set-ADAccountAuthenticationPolicySilo: change adaccount authentication policy silo with before-and-after evidence
Microsoft states: “Modifies the authentication policy or authentication policy silo of an account.”
Read the guide
Remove-ADCentralAccessPolicyMember: remove adcentral access policy member with bounded evidence
Microsoft states: “Removes central access rules from a central access policy in Active Directory.”
Read the playbook
Search-ADAccount: search adaccount under AD/DNS change control
Microsoft states: “The Search-ADAccount cmdlet retrieves one or more user, computer, or service accounts that meet the criteria specified by the parameters.”
Read the briefing
New-ADGroup: create adgroup with rollback checks
Microsoft states: “Properties that cannot be set by cmdlet parameters can be set using the OtherAttributes parameter.”
Read the checklist