New-ADOrganizationalUnit: create adorganizational unit against recorded identity and DNS state
Microsoft states: “The New-ADOrganizationalUnit cmdlet creates an Active Directory organizational unit (OU).”
Read the explainerDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 176 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
3,000 articlesGuidance and analysis from DSE
Set-ADDomain: change addomain with before-and-after evidence
Microsoft states: “The Set-ADDomain cmdlet modifies the properties of an Active Directory domain.”
Read the guide
Get-ADOrganizationalUnit: inventory adorganizational unit with bounded evidence
Microsoft states: “The Get-ADOrganizationalUnit cmdlet gets an organizational unit (OU) object or performs a search to get multiple OUs.”
Read the playbook
Get-ADDefaultDomainPasswordPolicy: inventory addefault domain password policy under AD/DNS change control
Microsoft states: “Gets the default password policy for an Active Directory domain.”
Read the briefing
Get-ADReplicationSiteLinkBridge: inventory adreplication site link bridge with rollback checks
Microsoft states: “Gets a specific Active Directory site link bridge or a set of site link bridge objects based on a specified filter.”
Read the checklist
Get-ADReplicationConnection: inventory adreplication connection against recorded identity and DNS state
Microsoft states: “Returns a specific Active Directory replication connection or a set of AD replication connection objects based on a specified filter.”
Read the explainer
Add-ADCentralAccessPolicyMember: stage additions to adcentral access policy member with before-and-after evidence
Microsoft states: “Adds central access rules to a central access policy in Active Directory.”
Read the guide
Set-ADClaimType: change adclaim type with bounded evidence
Microsoft states: “The Set-ADClaimType cmdlet can be used to modify a claim type in Active Directory.”
Read the playbook
New-ADObject: create adobject under AD/DNS change control
Microsoft states: “The New-ADObject cmdlet creates an Active Directory object such as a new organizational unit (OU) or new user account.”
Read the briefing
New-ADClaimType: create adclaim type with rollback checks
Microsoft states: “The New-ADClaimType cmdlet creates a new claim type in Active Directory.”
Read the checklist