Page 207 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
Microsoft states: “Domain Name System Security Extensions (DNSSEC) is a suite of extensions that add security to the Domain Name System (DNS) protocol by enabling DNS responses to be validated.”
Read the explainer
Microsoft states: “Windows Internet Name Service (WINS) is a legacy computer name registration and resolution service that maps computer NetBIOS names to IP addresses.”
Read the guide
Microsoft states: “DNS is an industry-standard protocol that maps computer names to IP addresses, enabling name resolution for computers and users.”
Read the playbook
Microsoft states: “This article explains how to request certificates using the Certification Authority (CA) Web Enrollment Role Service in Windows Server.”
Read the briefing
Microsoft states: “Active Directory Certificate Services (AD CS) is a Windows Server role for issuing and managing public key infrastructure (PKI) certificates used in secure communication and authentication protocols.”
Read the checklist
Microsoft states: “Network Device Enrollment Service(NDES) for Active Directory Certificate Services support a policy module that provides extra security for the Simple Certificate Enrollment Protocol (SCEP).”
Read the explainer
Microsoft states: “This article shows you how to submit a certificate in Certification Authority (CA) Web Enrollment role service by using a PKCS #10 file or a PKCS #7 file.”
Read the guide
Microsoft states: “This article describes how to configure an Online Responder (OCSP) to sign responses by using Module-Lattice-Based Digital Signature Algorithm (ML-DSA) in Active Directory Certificate Services (AD CS).”
Read the playbook
Microsoft states: “This article provides a solution to an error message when non-administrator users who have been delegated control try to join computers to a domain.”
Read the briefing
Microsoft states: “This article provides a solution to fix an error (Access is denied) that occurs when you promote Windows Server 2012 R2 or later domain controllers in an existing domain.”
Read the checklist