Get-ADResourcePropertyList: inventory adresource property list against recorded identity and DNS state
Microsoft states: “The Get-ADResourcePropertyList cmdlet gets resource property lists from Active Directory.”
Read the explainerDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 180 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
3,000 articlesGuidance and analysis from DSE
Get-ADCentralAccessRule: inventory adcentral access rule with before-and-after evidence
Microsoft states: “The Get-ADCentralAccessRule cmdlet retrieves central access rules from Active Directory.”
Read the guide
Move-ADDirectoryServer: move addirectory server with bounded evidence
Microsoft states: “Moves a directory server in Active Directory to a new site.”
Read the playbook
Get-ADResourcePropertyValueType: inventory adresource property value type under AD/DNS change control
Microsoft states: “The Get-ADResourcePropertyValueType cmdlet retrieves a resource property value type from Active Directory.”
Read the briefing
New-ADCentralAccessRule: create adcentral access rule with rollback checks
Microsoft states: “The New-ADCentralAccessRule cmdlet creates a central access rule in Active Directory.”
Read the checklist
Undo-ADServiceAccountMigration: undo adservice account migration against recorded identity and DNS state
Microsoft states: “Reverts the previous migration phase of a migration to an delegated managed service account.”
Read the explainer
Reset-ADServiceAccountPassword: reset adservice account password with before-and-after evidence
Microsoft states: “The Reset-ADServiceAccountPassword cmdlet resets the password for the standalone managed service account (MSA) on the local computer.”
Read the guide
Clear-ADClaimTransformLink: clear adclaim transform link with bounded evidence
Microsoft states: “Removes a claims transformation from being applied to one or more cross-forest trust relationships in Active Directory.”
Read the playbook
Reset-ADServiceAccountMigration: reset adservice account migration under AD/DNS change control
Microsoft states: “Resets the state of a migration to an delegated managed service account and unlinks the delegated managed service account from the user account.”
Read the briefing
Add-ADResourcePropertyListMember: stage additions to adresource property list member with rollback checks
Microsoft states: “Adds one or more resource properties to a resource property list in Active Directory.”
Read the checklist