Stage Configure firewall for AD domain and trusts with AD/DNS rollback checks
Microsoft states: “This article describes how to configure a firewall for Active Directory domains and trusts.”
Read the explainerDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 195 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
3,000 articlesGuidance and analysis from DSE
Trace NTDS Replication Event 2089 is logged across Active Directory and Windows DNS
Microsoft states: “This article discusses the problem where a new event error message is logged if you don’t back up a Windows Server-based domain controller in a given time period that is called the backup latency interval.”
Read the guide
Review When you run an LDAP query against a Windows Server 2008-based domain controller, you obtain a partial attribute list
Microsoft states: “This article provides workarounds for the issue when you run an LDAP query against a domain controller, you obtain a partial attribute list.”
Read the playbook
Scope Specify a server name and port number for an Active Directory cmdlet in observed AD/DNS state
Microsoft states: “Many cmdlets in the Windows PowerShell Active Directory module include a -Server parameter that lets you target operations to a specific domain controller (DC) and port.”
Read the briefing
Validate Domain controller is not functioning correctly with AD/DNS evidence
Microsoft states: “This article provides common resolutions to the issue where domain controller is not functioning correctly.”
Read the checklist
Stage Account-identifier allocator fails to initialize with AD/DNS rollback checks
Microsoft states: “This article provides a solution to solve errors that occurs when you add objects to Active Directory or restore a domain controller from a system state backup.”
Read the explainer
Trace Can't promote a domain controller to a global catalog server across Active Directory and Windows DNS
Microsoft states: “This article provides solutions to an issue where you can’t promote a Windows Server domain controller to a global catalog server.”
Read the guide
Review Optimize domain controller location before AD/DNS changes
Microsoft states: “This article provides the steps to optimize the location of a domain controller or global catalog that resides outside of a client’s site.”
Read the playbook
Scope ADFS 2.0 service fails to start in observed AD/DNS state
Microsoft states: “This article provides troubleshooting steps for ADFS service configuration and startup problems.”
Read the briefing
Validate Troubleshoot AD FS issues with AD/DNS evidence
Microsoft states: “This article discusses workflow troubleshooting for authentication issues for federated users in Microsoft Entra ID or Office 365.”
Read the checklist