Page 194 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
Microsoft states: “This article describes how to detect and recover if a Windows Server domain controller is incorrectly rolled back by using an image-based installation of the operating system.”
Read the explainer
Microsoft states: “This article provides recommendations for the Secure Time Seeding (STS) feature in Windows Server, along with general good time synchronization practices.”
Read the guide
Microsoft states: “This article describes when and how to transfer or seize Operation Master roles, formerly known as Flexible Single Master Operations (FSMO) roles.”
Read the playbook
Microsoft states: “You can use redirusr and redircmp to redirect user, computer, and group accounts that are created by earlier-version APIs.”
Read the briefing
Microsoft states: “This article mainly helps you to learn about the Flexible Single Master Operation (FSMO) roles in Active Directory.”
Read the checklist
Microsoft states: “This article provides information about the deployment and operation of Active Directory Domain Services (AD DS) domains that use single-label DNS names.”
Read the explainer
Microsoft states: “This article describes an issue in which Windows Time service settings are disabled in the registry after you upgrade to Windows Server 2016 or Windows 10 Version 1607.”
Read the guide
Microsoft states: “This article provides some steps to define Security Templates by using the Security Templates Snap-In.”
Read the playbook
Microsoft states: “This article discusses LDAP session security settings and requirements after security advisory ADV190023 is installed.”
Read the briefing
Microsoft states: “This article discusses how to resolve Event ID 2866 on supported versions of Windows Server.”
Read the checklist