Page 192 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
Microsoft states: “The article provides step-by-step instructions to implement Service for User to Proxy (S4U2Proxy) or Kerberos Only Constrained Delegation on a custom service account for Web Enrollment proxy pages.”
Read the explainer
Microsoft states: “This article describes two options for relocating the system volume (SYSVOL) tree on your domain controller.”
Read the guide
Microsoft states: “This article describes the symptoms, cause, and resolution steps for situations where Active Directory operations fail with error 8456 or 8457.”
Read the playbook
Microsoft states: “This article discusses a problem in which a new session setup for LDAP services takes longer than expected if it targets host names.”
Read the briefing
Microsoft states: “This article discusses how to upgrade Microsoft Windows 2000 domain controllers to Windows Server 2003 and how to add new Windows Server 2003 domain controllers to Windows 2000 domains.”
Read the checklist
Microsoft states: “This article describes how to raise Active Directory domain and forest functional levels.”
Read the explainer
Microsoft states: “This article describes the naming conventions for computer accounts in Windows, NetBIOS domain names, DNS domain names, Active Directory sites, and organizational units (OUs) that are defined in Active Directory Domain Services (AD DS).”
Read the guide
Microsoft states: “This article describes how to troubleshoot event ID 1311 messages in the Directory Service event log on a Windows domain.”
Read the playbook
Microsoft states: “This article provides the resolution of fixing the error "schema mismatch", when you try to run the Active Directory Installation Wizard (Dcpromo.exe).”
Read the briefing
Microsoft states: “This article provides guidance and considerations for disabling and replacing TLS 1.0 in Active Directory Federation Services (AD FS).”
Read the checklist