DSE security knowledge hub

Security knowledge,
without the noise.

Page 177 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.

DSE-authoredOfficial sourcesReviewed guidance
Search the library
DSE post stream

Guidance and analysis from DSE

3,000 articles
DSE visual briefIdentity & cloud

Grant-ADAuthenticationPolicySiloAccess: grant adauthentication policy silo access with before-and-after evidence

Microsoft states: “The Grant-ADAuthenticationPolicySiloAccess cmdlet grants permission to an account to join an authentication policy silo in Active Directory® Domain Services.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the guide
DSE visual briefIdentity & cloud

Add-ADGroupMember: stage additions to adgroup member with rollback checks

Microsoft states: “Adds one or more members to an Active Directory group.” It also states: “The Add-ADGroupMember cmdlet adds one or more users, groups, service accounts, or computers as new members of an Active Directory group.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the checklist
DSE visual briefIdentity & cloud

Add-ADPrincipalGroupMembership: stage additions to adprincipal group membership with bounded evidence

Microsoft states: “Adds a member to one or more Active Directory groups.” It also states: “The Add-ADPrincipalGroupMembership cmdlet adds a user, group, service account, or computer as a new member to one or more Active Directory groups.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the playbook