Page 197 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
Microsoft states: “When promoting a Windows Server 2008 or Windows Server 2008 R2 replica domain controller, the option to auto-install the DNS Server role is disabled or grayed out in the Active Directory Installation Wizard (DCPROMO).”
Read the explainer
Microsoft states: “This article provides help to solve performance issues (such as logon delays and Outlook hangs) that occur after you upgrade your Domain Controllers (DCs).”
Read the guide
Microsoft states: “This article provides a solution to an issue where the Windows Server 2008 R2 or newer domain controller only returns 5000 values for an LDAP response.”
Read the playbook
Microsoft states: “This article describes how to diagnose Active Directory replication failures.”
Read the briefing
Microsoft states: “This article discusses how to use Ntdsutil to find and clean up duplicate security identifiers.”
Read the checklist
Microsoft states: “This article provides a solution to an issue where duplicate Active Directory replication connections are created for one or more domain controllers across one or more sites.”
Read the explainer
Microsoft states: “This article helps fix an issue where Active Directory replication doesn’t work and event IDs 1865 and 1311 are logged.”
Read the guide
Microsoft states: “Certain operations are best done on a single domain controller.”
Read the playbook
Microsoft states: “This article describes how to diagnose and resolve a problem where event 5722 appears in the system log of your domain controller.”
Read the briefing
Microsoft states: “This article describes how to view and transfer FSMO roles.”
Read the checklist