Stage Change AD FS 2.0 service communications with AD/DNS rollback checks
Microsoft states: “This article provides the steps to change the Active Directory Federation Services 2.0 service communications certificate.”
Read the explainerDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 203 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
3,000 articlesGuidance and analysis from DSE
Trace Enable or disable DNS updates across Active Directory and Windows DNS
Microsoft states: “The article discusses how to disable DNS updates in Windows.”
Read the guide
Review DNS records not shown in DNS zones before AD/DNS changes
Microsoft states: “This article lists the causes of the issue where DNS records don’t show in a DNS zone.”
Read the playbook
Scope Don't be afraid of DNS scavenging, just be patient in observed AD/DNS state
Microsoft states: “This article discusses how to set up Domain Name System (DNS) scavenging and gives an example of setting scavenging up on a pre-existing zone.”
Read the briefing
Validate Troubleshoot DNS Event ID 4013 with AD/DNS evidence
Microsoft states: “This article resolves the event ID 4013 logged in the DNS event log of domain controllers that are hosting the DNS server role after Windows starts.”
Read the checklist
Stage Windows DNS registers duplicate SRV records for a DC if its computer name has uppercase letters with AD/DNS rollback checks
Microsoft states: “This article helps fix an issue where Windows DNS registers duplicate server location (SRV) records for a domain controller if its computer name has uppercase letters.”
Read the explainer
Trace Event ID 4015 - The DNS server encountered a critical error across Active Directory and Windows DNS
Microsoft states: “Domain Name Service (DNS) server Event ID 4015 indicates that a domain controller (DC) that runs the DNS Server role experienced a critical error.”
Read the guide
Review Troubleshoot DNS name resolution failures related to DNS forwarders before AD/DNS changes
Microsoft states: “You have forwarders, conditional forwarders, or root hints configured to perform name lookups for external names.”
Read the playbook
Scope DNS Server becomes an island in observed AD/DNS state
Microsoft states: “This article provides a solution to an issue where DNS Server becomes an island when a domain controller points to itself for the _msdcs.ForestDnsName domain.”
Read the briefing
Validate Name resolution and connectivity issues with AD/DNS evidence
Microsoft states: “This article provides a solution to name resolution and connectivity issues on a Routing and Remote Access Server that also runs DNS or WINS.”
Read the checklist