Remove-ADComputer: remove adcomputer against recorded identity and DNS state
Microsoft states: “The Identity parameter specifies the Active Directory computer to remove.”
Read the explainerDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 179 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
3,000 articlesGuidance and analysis from DSE
Set-ADForest: change adforest with before-and-after evidence
Microsoft states: “The Set-ADForest cmdlet modifies the properties of an Active Directory forest.”
Read the guide
Get-ADAccountAuthorizationGroup: inventory adaccount authorization group with bounded evidence
Microsoft states: “The Get-ADAccountAuthorizationGroup cmdlet gets the security groups from the specified user, computer, or service accounts token.”
Read the playbook
Get-ADDomain: inventory addomain under AD/DNS change control
Microsoft states: “The Get-ADDomain cmdlet gets the Active Directory domain specified by the parameters.”
Read the briefing
Get-ADForest: inventory adforest with rollback checks
Microsoft states: “You can specify the forest by setting the Identity or Current parameters.”
Read the checklist
Install-ADServiceAccount: install adservice account against recorded identity and DNS state
Microsoft states: “Installs an Active Directory managed service account on a computer or caches a group managed service account on a computer.”
Read the explainer
New-ADDCCloneConfigFile: create addcclone config file with before-and-after evidence
Microsoft states: “Performs prerequisite checks for cloning a domain controller and generates a clone configuration file if all checks succeed.”
Read the guide
Get-ADComputerServiceAccount: inventory adcomputer service account with bounded evidence
Microsoft states: “The Get-ADComputerServiceAccount cmdlet gets all of the service accounts that are hosted by the specified computer.”
Read the playbook
Enable-ADOptionalFeature: enable adoptional feature under AD/DNS change control
Microsoft states: “The Enable-ADOptionalFeature cmdlet enables an Active Directory optional feature that is associated with a particular domain mode or forest mode.”
Read the briefing
Set-ADDomainMode: change addomain mode with rollback checks
Microsoft states: “The Set-ADDomainMode cmdlet sets the domain mode for a domain.”
Read the checklist