Page 202 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
Microsoft states: “This article explains how Group Managed Service Accounts (gMSA) can experience authentication failures when Active Directory domain controllers improperly sort multiple Key Distribution Service (KDS) root keys.”
Read the explainer
Microsoft states: “This article describes the Active Directory database garbage collection process and calculation of allowed intervals.”
Read the guide
Microsoft states: “This article provides a solution to an issue where users can’t sign in to the domain after password changes on a Remote Domain Controller.”
Read the playbook
Microsoft states: “This article helps resolve an issue in which user or computer accounts have the lastLogonTimestamp value set to a future time.”
Read the briefing
Microsoft states: “This article describes how to restrict use of a computer to one domain user only.”
Read the checklist
Microsoft states: “This article provides a solution to an issue where domain controller promotion stops responding when short credentials are used in an environment that has NetBIOS over TCPIP disabled.”
Read the explainer
Microsoft states: “This article describes how to restore Internet Information Services (IIS) and clean up Active Directory when you uninstall Active Directory Federation Services 2.0.”
Read the guide
Microsoft states: “This issue occurs when you specify a grandchild organizational unit (OU) as the base distinguished name (base DN) in the Adamsync configuration file.”
Read the playbook
Microsoft states: “This article addresses the error code 0x40 encountered during domain join operations.”
Read the briefing
Microsoft states: “This article provides a workaround for an issue where the IsmServ service doesn’t start correctly when a domain controller starts.”
Read the checklist