Stage Lingering objects in an AD DS forest with AD/DNS rollback checks
Microsoft states: “This article provides information about lingering objects in an Active Directory Domain Services (AD DS) forest.”
Read the explainerDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 193 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
3,000 articlesGuidance and analysis from DSE
Trace Use Directory Service to manage AD objects across Active Directory and Windows DNS
Microsoft states: “This article describes how to use the Directory Service command-line tools to perform administrative tasks for Active Directory in Windows Server 2003.”
Read the guide
Review Domain controllers don't demote before AD/DNS changes
Microsoft states: “This article provides a workaround for an issue where domain controllers don’t demote when you use the Active Directory Installation Wizard (Dcpromo.exe) to force demotion.”
Read the playbook
Scope Jet database errors and recovery steps in observed AD/DNS state
Microsoft states: “This article introduces Jet database error messages and troubleshooting steps.”
Read the briefing
Validate Active Directory replication event ID 2108 and 1084 with AD/DNS evidence
Microsoft states: “This article provides a solution to an issue where you get event IDs 2108 and 1084 when inbound replication of the Active Directory Domain Services (AD DS) occurs.”
Read the checklist
Stage Guidance for troubleshooting Active Directory replication with AD/DNS rollback checks
Microsoft states: “Try our Virtual Agent - It can help you quickly identify and fix common Active Directory replication issues.”
Read the explainer
Trace Configure W32Time against huge time offset across Active Directory and Windows DNS
Microsoft states: “This article describes how to configure the Windows Time service against a large time offset.”
Read the guide
Review Troubleshoot common AD replication errors before AD/DNS changes
Microsoft states: “This article contains information and links to help you troubleshoot Active Directory Replication errors.”
Read the playbook
Scope Enable Lightweight Directory Access Protocol (LDAP) over Secure Sockets Layer (SSL) in observed AD/DNS state
Microsoft states: “This article describes how to enable Lightweight Directory Access Protocol (LDAP) over Secure Sockets Layer (SSL) with a third-party certification authority.”
Read the briefing
Validate Restore user accounts and groups in AD with AD/DNS evidence
Microsoft states: “This article provides information on how to restore deleted user accounts and group memberships in Active Directory.”
Read the checklist