Practice GETS calls before normal telephone service is congested
CISA Priority Telecommunications Services presentation
Publication date not specified · DSE reviewed August 25, 2026
Evidence before assertion
Official source register
Use this register to trace every DSE resource to its primary authority and see when the guidance was last reviewed. A reference supports the article’s central claim; linked bibliographies may provide additional scope.
- 2,250
- Resources
- 2,244
- Primary sources
- 62
- Authorities
Authority, scope, and freshness are separate questions.
Authority: DSE favors exact government, standards-body, vendor documentation, and manufacturer advisory pages over summaries or reposts.
Scope: An official source does not prove that every environment is affected. Product, version, configuration, exposure, licensing, and business context still matter.
Freshness: “Published” is the source’s date when available. “DSE reviewed” records when our team last checked the article and its primary reference.
Reference directory
Browse by source authority
Living documentation may not expose a fixed publication date. Those entries still show the DSE review date.
405d.hhs.gov
1 resourceAxis Communications
37 resourcesChecklistAdvisory
Accept focus across the required depth, not at one target point
Lenses in surveillance
Publication date not specified · DSE reviewed August 25, 2026
ChecklistImportant
Accept intelligent compression with incident scenes, not average savings
Axis Zipstream technology
Publication date not specified · DSE reviewed August 25, 2026
PlaybookAdvisory
Accept low-light video by reproducing the scene—not by trusting the lux line
Axis Communications: Lightfinder white paper
Publication date not specified · DSE reviewed August 17, 2026
BriefingAdvisory
AXIS OS security updates: verify camera firmware tracks and deployed versions
Axis Security Advisories
Publication date not specified · DSE reviewed July 19, 2026
GuideAdvisory
Camera certificate lifecycle management: HTTPS and 802.1X are different jobs
Axis Communications — AXIS Device Manager Security Guide
Publication date not specified · DSE reviewed July 19, 2026
GuideAdvisory
Choose the shutter architecture after measuring target motion
Axis Communications: Global shutter vs rolling shutter
Published July 1, 2026 · DSE reviewed August 11, 2026
GuideImportant
Commission illumination as part of the camera system
Lighting for network video
Publication date not specified · DSE reviewed August 25, 2026
PlaybookAdvisory
Commission license-plate capture for the lane, speed, and night
Axis Communications: License plate capture
Published December 1, 2024 · DSE reviewed August 11, 2026
ChecklistAdvisory
Commission radar as a perimeter sensor, not a magic field
Axis Communications: Radar in surveillance
Published July 1, 2026 · DSE reviewed August 11, 2026
GuideImportant
Design anti-passback around sensors, topology, and recovery
AXIS Camera Station Secure Entry User Manual
Publication date not specified · DSE reviewed August 25, 2026
GuideAdvisory
Design camera coverage from the task—not the megapixel count
Axis Communications: Pixel density and DORI—Meeting operational requirements in network video
Published May 1, 2023 · DSE reviewed August 11, 2026
GuideImportant
Ground the complete camera path before claiming surge protection
Power surges
Publication date not specified · DSE reviewed August 25, 2026
PlaybookImportant
Make edge-storage encryption recoverable before enabling it
AXIS OS Web Interface Help - LTS 2026
Publication date not specified · DSE reviewed August 25, 2026
ChecklistImportant
Measure live-video delay before operators must act
Axis Communications: Latency in live network video surveillance
Published June 1, 2024 · DSE reviewed August 11, 2026
GuideImportant
Place video privacy controls at capture, viewing, and export
Privacy in surveillance
Publication date not specified · DSE reviewed August 25, 2026
GuideImportant
Preserve scene metadata as a separately verified evidence track
Unlocking the power of scene metadata
Publication date not specified · DSE reviewed August 25, 2026
BriefingImportant
Prove frame rate at the recorder, not only at the camera
Controlled full frame rate
Publication date not specified · DSE reviewed August 25, 2026
ChecklistAdvisory
Prove infrared imagery on the real materials and distances
IR in surveillance
Publication date not specified · DSE reviewed August 25, 2026
ChecklistImportant
Prove supervised door inputs by opening and shorting the circuit
AXIS A1610 Network Door Controller User Manual — Supervised inputs
Publication date not specified · DSE reviewed August 25, 2026
ChecklistAdvisory
Prove wide dynamic range where bright and dark collide
Axis Communications: Wide dynamic range
Published March 1, 2026 · DSE reviewed August 11, 2026
GuideAdvisory
Record panoramic video investigators can dewarp later
Panoramic cameras
Publication date not specified · DSE reviewed August 25, 2026
ChecklistImportant
Replace edge-storage cards before wear becomes evidence loss
AXIS OS Knowledge Base
Publication date not specified · DSE reviewed August 25, 2026
PlaybookImportant
Require a real first arrival before scheduled public unlock
AXIS Camera Station Feature Guide
Publication date not specified · DSE reviewed August 25, 2026
ChecklistAdvisory
Run a camera image-quality maintenance audit before footage is needed
Axis PTZ camera preventive maintenance instructions and checklist
Publication date not specified · DSE reviewed August 17, 2026
GuideAdvisory
Set video bitrate control from evidence and a measured storage budget
Axis Communications: Bitrate control for IP video
Published March 1, 2023 · DSE reviewed August 11, 2026
ExplainerInformation
Signed video: what it proves, what must survive export, and what it does not replace
Axis Communications — Signed video developer documentation
Publication date not specified · DSE reviewed July 19, 2026
GuideImportant
Size edge storage from write workload and recovery needs
Surveillance cards for edge storage
Publication date not specified · DSE reviewed August 25, 2026
ChecklistAdvisory
Stabilize the camera before analytics and operators inherit the shake
Axis Communications: Image stabilization
Published March 1, 2026 · DSE reviewed August 11, 2026
ChecklistAdvisory
Stop integrated infrared light from reflecting back into the dome
Axis Communications: IR reflections in dome cameras
Published May 1, 2021 · DSE reviewed August 11, 2026
PlaybookAdvisory
Suspected Axis device compromise: preserve evidence before cleanup
Axis Communications — AXIS OS Forensics Guide
Publication date not specified · DSE reviewed July 19, 2026
BriefingImportant
Test cold startup separately from normal camera operation
Tested without compromise
Publication date not specified · DSE reviewed August 25, 2026
ChecklistImportant
Test edge failover recording against the exact camera and firmware
AXIS Camera Station Pro User Manual — Failover recording
Publication date not specified · DSE reviewed August 25, 2026
PlaybookImportant
Treat controller door override as a break-glass procedure
AXIS A1610 Network Door Controller User Manual — Door override
Publication date not specified · DSE reviewed August 25, 2026
GuideAdvisory
Tune image-health alerts with human validation
AXIS Image Health Analytics User Manual
Publication date not specified · DSE reviewed August 25, 2026
GuideAdvisory
Turn the AXIS OS Hardening Guide into an operating baseline
Axis Communications — AXIS OS Hardening Guide
Publication date not specified · DSE reviewed July 19, 2026
GuideAdvisory
Use thermal cameras to detect, then visual cameras to identify
Axis Communications: Thermal cameras
Published October 1, 2021 · DSE reviewed August 11, 2026
BriefingImportant
Verify the oldest available recording, not the retention setting
AXIS Camera Station Pro User Manual — Select storage devices to connect
Publication date not specified · DSE reviewed August 25, 2026
Cybersecurity and Infrastructure Security Agency
34 resourcesChecklistAdvisory
Backups are not recovery until restoration is tested
CISA #StopRansomware Guide
Published October 19, 2023 · DSE reviewed July 19, 2026
GuideAdvisory
Build a practical baseline with CISA Cybersecurity Performance Goals
CISA Cross-Sector Cybersecurity Performance Goals
Publication date not specified · DSE reviewed July 19, 2026
GuideImportant
Build a workplace-violence program before behavior becomes an emergency
CISA Interagency Security Committee: Violence in the Federal Workplace—A Guide for Prevention and Response
Published January 1, 2019 · DSE reviewed August 11, 2026
PlaybookImportant
Build an incident channel you can trust when collaboration is compromised
CISA Cyber Storm IX After-Action Report
Published October 1, 2024 · DSE reviewed August 4, 2026
GuideAdvisory
Build an insider-risk program that protects assets, people, and privacy
CISA Insider Threat Mitigation Guide
Publication date not specified · DSE reviewed August 4, 2026
ChecklistAdvisory
Build event logging that supports detection, investigation, and resilience
CISA: Best Practices for Event Logging and Threat Detection
Published August 21, 2024 · DSE reviewed July 19, 2026
BriefingCritical
C-CURE 9000 and victor RCE: What CISA Update A Changes
CISA ICSA-26-204-01 Update A
Published August 11, 2026 · DSE reviewed August 12, 2026
ChecklistImportant
Close technician offboarding across PSA, RMM, vaults, partner portals, and customer access
CISA: Protecting Against Cyber Threats to Managed Service Providers and their Customers
Published May 11, 2022 · DSE reviewed August 17, 2026
PlaybookAdvisory
Control mechanical override keys as privileged credentials
CISA Catalog of Recommendations: Physical Access Control
Publication date not specified · DSE reviewed August 17, 2026
ChecklistAdvisory
Demand evidence, not promises, when buying digital technology
CISA and international partners: Choosing Secure and Verifiable Technologies
Published December 5, 2024 · DSE reviewed July 19, 2026
GuideAdvisory
Design cyber tabletops that force real decisions
CISA Cybersecurity Tabletop Exercise Packages
Published February 2, 2023 · DSE reviewed August 4, 2026
ChecklistAdvisory
Expose shared recovery-resource conflicts across related service-continuity plans
CRR Supplemental Resource Guide, Volume 6: Service Continuity
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Harden network infrastructure with isolated management and verifiable configuration
CISA and partners: Enhanced Visibility and Hardening Guidance for Communications Infrastructure
Published December 4, 2024 · DSE reviewed July 19, 2026
GuideAdvisory
Make memory safety a product roadmap, not a patching promise
CISA and international partners: The Case for Memory Safe Roadmaps
Published December 6, 2023 · DSE reviewed August 11, 2026
GuideImportant
Make prohibited-items screening a written facility decision—not a guard improvisation
CISA Interagency Security Committee: Items Prohibited in Federal Facilities
Published May 26, 2022 · DSE reviewed August 11, 2026
PlaybookAdvisory
Make visitor access a sponsored, time-bounded, fully closed loop
CISA Interagency Security Committee: Facility Access Control—An ISC Best Practice
Published December 17, 2020 · DSE reviewed August 11, 2026
GuideInformation
Measure zero-trust maturity across five pillars before buying more tools
CISA Zero Trust Maturity Model, Version 2.0
Publication date not specified · DSE reviewed July 19, 2026
PlaybookAdvisory
Plan removable-media controls around business use, malware risk, and sanitization
CISA: How to Protect the Data That is Stored on Your Devices
Publication date not specified · DSE reviewed August 17, 2026
GuideAdvisory
Plan vehicle-incident mitigation before buying barriers
Cybersecurity and Infrastructure Security Agency: Vehicle Incident Prevention and Mitigation Security Guide
Published April 23, 2024 · DSE reviewed August 11, 2026
PlaybookImportant
Prepare bomb-threat decisions before the call or message arrives
CISA Office for Bombing Prevention: Bomb Threat Guide, Version 1
Published August 1, 2023 · DSE reviewed August 11, 2026
PlaybookAdvisory
Prepare for DDoS before availability becomes an incident
CISA, FBI, and MS-ISAC: Understanding and Responding to Distributed Denial-of-Service Attacks
Published March 21, 2024 · DSE reviewed July 19, 2026
BriefingImportant
Prequalify critical circuits for CISA Telecommunications Service Priority
Telecommunications Service Priority Overview
Publication date not specified · DSE reviewed August 25, 2026
ChecklistImportant
Prove a network device can be rebuilt from a known-good configuration
CISA Disable Cisco Smart Install Feature (CM0014)
Published March 14, 2025 · DSE reviewed August 17, 2026
ChecklistAdvisory
Ransomware first response: a calm containment checklist
CISA #StopRansomware Guide
Published October 19, 2023 · DSE reviewed July 19, 2026
GuideAdvisory
Reassess broad VPN access for a hybrid, least-privilege environment
CISA and partners: Modern Approaches to Network Access Security
Published June 18, 2024 · DSE reviewed July 19, 2026
PlaybookAdvisory
Recognize, report, and contain a suspected phishing message
CISA Personal Security Considerations: Action Guide for Critical Infrastructure Workers
Published June 7, 2024 · DSE reviewed July 19, 2026
ChecklistAdvisory
Reduce unnecessary internet exposure before it becomes an incident path
CISA — Internet Exposure Reduction Guidance
Published June 4, 2025 · DSE reviewed July 19, 2026
ChecklistAdvisory
Secure RMM and remote-access software before attackers use it
CISA and partners: Guide to Securing Remote Access Software
Published June 6, 2023 · DSE reviewed July 19, 2026
ChecklistAdvisory
Stop phishing at the control plane, not only at the inbox
CISA and partners: Phishing Guidance — Stopping the Attack Cycle at Phase One
Published October 18, 2023 · DSE reviewed July 19, 2026
ChecklistAdvisory
Test every door’s degraded modes before the network or server disappears
CISA: Facility Access Control—An Interagency Security Committee Best Practice
Publication date not specified · DSE reviewed August 17, 2026
GuideAdvisory
Turn guard post orders into observable duties, limits, and handoffs
CISA Interagency Security Committee: Armed Contract Security Officers in Federal Facilities—An ISC Best Practice
Published January 1, 2019 · DSE reviewed August 11, 2026
GuideAdvisory
Use CISA SSVC to decide what happens after severity and KEV screening
CISA Stakeholder-Specific Vulnerability Categorization Guide
Publication date not specified · DSE reviewed August 4, 2026
GuideAdvisory
Verify telecom diversity through last-mile paths, power, equipment, and shared facilities
CISA: Ten Keys to Public Safety Network Resiliency
Publication date not specified · DSE reviewed August 17, 2026
ExplainerAdvisory
Why CISA Known Exploited Vulnerabilities should change patch priority
CISA Known Exploited Vulnerabilities Catalog
Publication date not specified · DSE reviewed July 19, 2026
datatracker.ietf.org
3 resourcesChecklistImportant
Close IPv6 RA-Guard evasion paths before calling the access edge protected
RFC 7113: Implementation Advice for IPv6 Router Advertisement Guard (RA-Guard)
Publication date not specified · DSE reviewed August 25, 2026
ExplainerImportant
Compare intended and operational network state after automation
RFC 8342: Network Management Datastore Architecture
Publication date not specified · DSE reviewed August 25, 2026
BriefingAdvisory
Pilot Experimental RADIUS/1.1 without silently breaking AAA
RFC 9765: RADIUS Version 1.1
Publication date not specified · DSE reviewed August 25, 2026
developer.hashicorp.com
1 resourceChecklistImportant
Treat Terraform state as production data with locking and recovery
HashiCorp Developer: State Storage and Locking
Publication date not specified · DSE reviewed August 11, 2026
Digital Object Identifier
7 resourcesPlaybookAdvisory
Export video evidence so another person can verify it
NISTIR 8161 Revision 1 — CCTV Digital Video Export Profile
Published April 8, 2019 · DSE reviewed August 4, 2026
GuideAdvisory
Give every connected device a network permission envelope
NIST SP 1800-15 — Mitigating Network-Based Attacks Using MUD
Published May 1, 2021 · DSE reviewed August 4, 2026
ChecklistAdvisory
Govern IPv6 even when the network is called IPv4-only
NIST SP 800-119: Guidelines for the Secure Deployment of IPv6
Published December 29, 2010 · DSE reviewed August 11, 2026
GuideImportant
Inventory cryptography before long-lived systems trap it
NIST CSWP 39 Update 1 — Considerations for Achieving Crypto Agility
Published December 19, 2025 · DSE reviewed August 4, 2026
ChecklistAdvisory
Make video analytics earn production trust
NIST AI Risk Management Framework 1.0
Published January 26, 2023 · DSE reviewed August 4, 2026
ExplainerAdvisory
Onboard connected security devices without lending trust first
NIST SP 1800-36 — Trusted IoT Device Network-Layer Onboarding and Lifecycle Management
Published November 25, 2025 · DSE reviewed August 4, 2026
GuideAdvisory
Run TLS certificates as an enterprise service, not a renewal calendar
NIST SP 1800-16 — Securing Web Transactions: TLS Server Certificate Management
Publication date not specified · DSE reviewed August 4, 2026
doc.milestonesys.com
2 resourcesPlaybookImportant
Govern evidence locks as retention exceptions, not permanent pins
XProtect evidence locks
Publication date not specified · DSE reviewed August 25, 2026
PlaybookAdvisory
Prove VMS archiver failover under full load—not just configuration state
Milestone Systems: Failover recording server explained
Publication date not specified · DSE reviewed August 17, 2026
docs.aws.amazon.com
1 resourceGuideImportant
Map AWS dependencies to the fault boundary they actually use
AWS Fault Isolation Boundaries
Published November 16, 2022 · DSE reviewed August 25, 2026
docs.fcc.gov
2 resourcesGuideAdvisory
Plan 6 GHz Wi-Fi from client capability, security, power class, and location
FCC Fact Sheet: Unlicensed Use of the 6 GHz Band
Publication date not specified · DSE reviewed August 17, 2026
ExplainerInformation
Read the U.S. Cyber Trust Mark as a baseline—not a blank check
FCC Public Notice DA 26-354 — U.S. Cyber Trust Mark Lead Administrator
Published April 13, 2026 · DSE reviewed August 4, 2026
docs.github.com
1 resourceGuideImportant
Replace GitHub Actions cloud secrets with OpenID Connect federation
GitHub Docs: Configuring OpenID Connect in cloud providers
Publication date not specified · DSE reviewed August 11, 2026
docs.rapid7.com
1 resourceGuideAdvisory
Use authenticated vulnerability scans to measure what unauthenticated scans miss
Rapid7 InsightVM: Configuring scan credentials
Publication date not specified · DSE reviewed August 17, 2026
DSE Security
1 resourceGuideInformation
Choose the right DSE channel: Updates, helpdesk, or main site
DSE Security contact and support routing
Publication date not specified · DSE reviewed July 19, 2026
DSE Security editorial guidance
6 resourcesChecklistInformation
A production-safe update window for servers, networks, and endpoints
DSE Updates editorial methodology
Publication date not specified · DSE reviewed July 19, 2026
ChecklistAdvisory
Access control update readiness: protect the doors while changing the software
DSE Updates editorial methodology
Publication date not specified · DSE reviewed July 19, 2026
ExplainerInformation
How DSE Updates researches, reviews, and maintains public guidance
DSE Security Updates
Publication date not specified · DSE reviewed July 19, 2026
PlaybookInformation
Turn a DSE Update into an owned assessment, change, and verification record
DSE Updates Usage and Citation Policy
Publication date not specified · DSE reviewed August 17, 2026
GuideInformation
Use the DSE Updates API without stripping away source, review, and priority context
DSE Updates API
Publication date not specified · DSE reviewed August 17, 2026
ExplainerInformation
Welcome to DSE Updates: security guidance without the noise
DSE Updates editorial methodology
Publication date not specified · DSE reviewed July 19, 2026
Eaton
1 resourceChecklistAdvisory
UPS readiness means more than seeing a green status light
Eaton — Considerations for UPS installation
Publication date not specified · DSE reviewed July 19, 2026
emilms.fema.gov
2 resourcesGuideAdvisory
Verify restored-site capabilities before moving essential functions back
IS-523 Lesson 5: Reconstitution
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Write delegation activation, termination, limits, and redelegation into the authority instrument
Delegations of Authority Checklist
Publication date not specified · DSE reviewed August 26, 2026
Federal Emergency Management Agency
6 resourcesGuideAdvisory
Build an alternate-worksite plan around identity, connectivity, data, and people
FEMA Continuity Guidance Circular
Publication date not specified · DSE reviewed August 17, 2026
PlaybookAdvisory
Close corrective actions after exercises—not at the after-action meeting
FEMA Homeland Security Exercise and Evaluation Program guidance
Publication date not specified · DSE reviewed August 17, 2026
ChecklistInformation
Keep essential functions running with FEMA continuity elements
FEMA Preparedness Toolkit: E.6 Continuity Guidance Circular
Publication date not specified · DSE reviewed July 19, 2026
ChecklistImportant
Keep tornado safe rooms available, signed, supplied, and occupancy-ready
FEMA P-361: Safe Rooms for Tornadoes and Hurricanes, Fourth Edition
Published April 1, 2025 · DSE reviewed August 11, 2026
PlaybookImportant
Map supply routes and private-sector dependencies before a disaster
Supply Chain Resilience Guide
Publication date not specified · DSE reviewed August 25, 2026
ChecklistAdvisory
Test standby generators under load, fuel constraints, and transfer conditions
FEMA P-1019: Emergency Power Systems for Critical Facilities
Publication date not specified · DSE reviewed August 17, 2026
Federal Trade Commission
3 resourcesGuideAdvisory
Build a data register that reduces breach impact and protection burden
FTC: Protecting Personal Information, A Guide for Business
Published July 28, 2026 · DSE reviewed July 28, 2026
PlaybookAdvisory
Data breach response: coordinate containment, investigation, communication, and notification
Federal Trade Commission: Data Breach Response — A Guide for Business
Publication date not specified · DSE reviewed July 19, 2026
GuideImportant
Govern FTC Safeguards Rule service providers through the full relationship
Federal Trade Commission — Safeguards Rule: What Your Business Needs to Know
Published April 27, 2022 · DSE reviewed August 4, 2026
Fluke Networks
2 resourcesChecklistAdvisory
Accept new fiber with both Tier 1 loss evidence and Tier 2 event evidence
Fluke Networks: OTDR—Your Ultimate Troubleshooter
Published August 11, 2025 · DSE reviewed August 11, 2026
ExplainerInformation
Cable verification, qualification, and certification answer different questions
Fluke Networks — Verification, Qualification, Certification: Which Do I Need?
Published January 23, 2019 · DSE reviewed July 19, 2026
Genetec
1 resourceChecklistAdvisory
Turn the Genetec Security Center 5.14 Hardening Guide into a measured baseline
Genetec — Security Center Hardening Guide 5.14
Published March 19, 2026 · DSE reviewed July 19, 2026
github.com
1 resourcePlaybookAdvisory
Turn CISA ScubaGear into a governed Microsoft 365 drift assessment
CISA Secure Cloud Business Applications project and ScubaGear
Published October 20, 2022 · DSE reviewed August 4, 2026
Internet Corporation for Assigned Names and Numbers
1 resourceChecklistImportant
Treat the domain registrar as a business-critical control plane
ICANN SSAC: SAC 044—A Registrant’s Guide to Protecting Domain Name Registration Accounts
Published November 5, 2010 · DSE reviewed August 11, 2026
kubernetes.io
1 resourcePlaybookImportant
Enforce Kubernetes Pod Security Standards by namespace and exception
Kubernetes Documentation: Pod Security Admission
Published March 7, 2024 · DSE reviewed August 11, 2026
le.fbi.gov
3 resourcesBriefingImportant
Do not substitute cameras for a required CJIS visitor escort
FBI CJIS Security Policy v6.1 — Appendix A definition of Escort
Published June 25, 2026 · DSE reviewed August 25, 2026
GuideImportant
Protect CJIS cabling and displays beyond the secure-room door
FBI CJIS Security Policy v6.1 — PE-4 and PE-5
Published June 25, 2026 · DSE reviewed August 25, 2026
PlaybookImportant
Turn CJIS physical-access logs into quarterly incident-review input
FBI CJIS Security Policy v6.1 — PE-6 Monitoring Physical Access
Published June 25, 2026 · DSE reviewed August 25, 2026
Microsoft
2 resourcesPlaybookImportant
Move Exchange Online SMTP AUTH clients off Basic authentication with evidence
Microsoft Exchange Team: Updated Exchange Online SMTP AUTH Basic Authentication Deprecation Timeline
Published January 29, 2026 · DSE reviewed August 11, 2026
PlaybookImportant
Retire NTLM by proving every dependency before you block it
Microsoft: Advancing Windows security—Disabling NTLM by default
Published January 29, 2026 · DSE reviewed August 11, 2026
Microsoft Learn
1,643 resourcesGuideInformation
Account for both virtual Fibre Channel WWN sets before live migration
Hyper-V Virtual Fibre Channel in Windows Server
Publication date not specified · DSE reviewed September 8, 2026
ExplainerInformation
Account for cache misses against both Azure VM storage limits
Virtual machine and disk performance - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Account for cached Intune scripts after Windows management ends
Add PowerShell Scripts to Windows Devices in Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Account for checkpoint reset when recreating Event Hubs log ingestion
Ingest events from Azure Event Hubs into Azure Monitor Logs (Preview) - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Account for coarser samples when reviewing older S2D performance history
Performance history for Storage Spaces Direct
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Account for deferred SMB close before a REST client uses the file ETag
Mount SMB Azure File Share on Linux | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Account for disks added in Azure before Site Recovery failback
About failover and failback in Azure Site Recovery - Modernized - Azure Site Recovery | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Account for every recipient when a tenant sender block rejects outbound mail
Allow or block email using the Tenant Allow/Block List - Microsoft Defender for Office 365 | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistInformation
Account for existing scale-set instances when enabling encryption at host
Enable end-to-end encryption using encryption at host - Azure portal - managed disks - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Account for fault-domain alignment when reattaching Premium SSD v2 disks
Use Premium SSD v2 with VMs in availability set - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Account for NFSv3 ancillary services in NetApp firewall testing
Understand NAS protocols in Azure NetApp Files | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Account for SAS-bearing linked-template URLs in deployment records
Link templates for deployment - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Account for scope removal when migrating DHCP failover partners
Migrate existing DHCP failover deployment on Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Account for skipped Graph-only conditions in OAuth app policies
Create and manage OAuth app policies with app governance - Microsoft Defender for Cloud Apps | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Account for special identity groups in every Windows ACL review
Special Identity Groups
Published July 8, 2025 · DSE reviewed August 26, 2026
GuideInformation
Account for STIG checks excluded from Intune's audit report
Use Security Technical Implementation Guide audit baselines to assess Windows device compliance in Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Account for the setup wait introduced by macOS local-account configuration
Set up automated device enrollment (ADE) for macOS - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Account for zonal upgrade sequencing in Service Fabric timeouts
Deploy a cluster across Availability Zones - Azure Service Fabric | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingAdvisory
Activate Defender for Identity sensor v3 only after its prerequisite checks
Deploy the Defender for Identity sensor v3.x
Published August 23, 2026 · DSE reviewed August 26, 2026
GuideAdvisory
Add sensor onboarding and Test-MDIConfiguration to identity-platform reviews
Quarterly or ad-hoc operational guide for Microsoft Defender for Identity
Published July 2, 2026 · DSE reviewed August 26, 2026
GuideAdvisory
Add-ADCentralAccessPolicyMember: stage additions to adcentral access policy member with before-and-after evidence
Add-ADCentralAccessPolicyMember
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Add-ADComputerServiceAccount: stage additions to adcomputer service account with rollback checks
Add-ADComputerServiceAccount
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Add-ADFineGrainedPasswordPolicySubject: stage additions to adfine grained password policy subject with bounded evidence
Add-ADFineGrainedPasswordPolicySubject
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Add-ADGroupMember: stage additions to adgroup member with rollback checks
Add-ADGroupMember
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Add-ADPrincipalGroupMembership: stage additions to adprincipal group membership with bounded evidence
Add-ADPrincipalGroupMembership
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Add-ADResourcePropertyListMember: stage additions to adresource property list member with rollback checks
Add-ADResourcePropertyListMember
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Add-DnsServerConditionalForwarderZone: stage additions to dns server conditional forwarder zone with rollback checks
Add-DnsServerConditionalForwarderZone
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Add-DnsServerDirectoryPartition: stage additions to dns server directory partition with before-and-after evidence
Add-DnsServerDirectoryPartition
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Add-DnsServerPrimaryZone: stage additions to dns server primary zone against recorded identity and DNS state
Add-DnsServerPrimaryZone
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Add-DnsServerQueryResolutionPolicy: stage additions to dns server query resolution policy with before-and-after evidence
Add-DnsServerQueryResolutionPolicy
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Add-DnsServerRecursionScope: stage additions to dns server recursion scope with bounded evidence
Add-DnsServerRecursionScope
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Add-DnsServerResourceRecord: stage additions to dns server resource record with bounded evidence
Add-DnsServerResourceRecord
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Add-DnsServerResourceRecordDnsKey: stage additions to dns server resource record dns key with rollback checks
Add-DnsServerResourceRecordDnsKey
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Add-DnsServerResponseRateLimitingExceptionlist: stage additions to dns server response rate limiting exceptionlist with bounded evidence
Add-DnsServerResponseRateLimitingExceptionlist
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Add-DnsServerRootHint: stage additions to dns server root hint with rollback checks
Add-DnsServerRootHint
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Add-DnsServerSigningKey: stage additions to dns server signing key with before-and-after evidence
Add-DnsServerSigningKey
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Add-DnsServerStubZone: stage additions to dns server stub zone with bounded evidence
Add-DnsServerStubZone
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Add-DnsServerTrustAnchor: stage additions to dns server trust anchor under AD/DNS change control
Add-DnsServerTrustAnchor
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Add-DnsServerVirtualizationInstance: stage additions to dns server virtualization instance with rollback checks
Add-DnsServerVirtualizationInstance
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Add-DnsServerZoneDelegation: stage additions to dns server zone delegation against recorded identity and DNS state
Add-DnsServerZoneDelegation
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Add-DnsServerZoneTransferPolicy: stage additions to dns server zone transfer policy under AD/DNS change control
Add-DnsServerZoneTransferPolicy
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Adjust Defender for Identity alert thresholds only after accounting for learning periods
Adjust alert thresholds
Published July 2, 2026 · DSE reviewed August 26, 2026
ChecklistImportant
Align Azure Update Manager schedules with each machine's patch orchestrator
Update options and orchestration in Azure Update Manager
Publication date not specified · DSE reviewed August 25, 2026
GuideInformation
Align the AzAcSnap working directory with its override configuration
Tips for using Azure Application Consistent Snapshot tool for Azure NetApp Files | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Align the iOS Tunnel app identity across policy, registration, and build
Use Microsoft Tunnel VPN with iOS/iPad devices that don't enroll with Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Allocate finite VMQ resources to the intended Hyper-V interfaces
Network recommendations for a Hyper-V cluster
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Allocate Hyper-V CPU groups with a shared budget in mind
Virtual Machine Resource Controls
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Allocate one coherent address plan for a Hyper-V NAT host
Set up a NAT network
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Allow for a restart when using VM Reapply during extension recovery
Troubleshooting Windows VM extension failures - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Allow for continuous-availability retries when evaluating an Azure Files pause
SMB File Shares in Azure Files | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Allow for cross-tenant identity propagation in managed-application deployment
Managed app with managed identity - Azure Managed Applications | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingInformation
Allow for metric-export backoff when an inactive resource becomes active
Diagnostic Settings in Azure Monitor - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Allow for Resource Health transitions that never enter the Activity Log
Azure Resource Health overview - Azure Service Health | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Allow for the hold between Azure Storage redundancy conversions
Change how a storage account is replicated - Azure Storage | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Allow for the Snapshot Debugger collection plan before expecting a snapshot of an exception
Snapshot Debugger for .NET Exception Debugging - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Apply Azure VM DNS changes through network configuration and DHCP renewal
Azure Virtual Network Name Resolution Guide | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Apply Defender for Office 365 preset policies without overprotecting the wrong users
Microsoft Learn: Preset security policies in cloud organizations
Published July 3, 2026 · DSE reviewed July 19, 2026
ExplainerAdvisory
Apply fine-grained password policy to the intended AD principals
Configure fine grained password policies for Active Directory Domain Services in Windows Server
Published June 16, 2025 · DSE reviewed August 26, 2026
ExplainerAdvisory
Apply sensitive, Exchange, and honeytoken identity tags for their documented detections
Defender for Identity entity tags in Microsoft Defender
Published July 2, 2026 · DSE reviewed August 26, 2026
GuideInformation
Apply the root-domain step before Azure Files cloud-trust child-domain setup
Configure Cloud Trust between AD DS and Entra ID | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Apply zone balance before interpreting oldest or newest scale-in selection
Use scale-in policies with Azure Virtual Machine Scale Sets - Azure Virtual Machine Scale Sets | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistInformation
Approve attached-resource delete policies before retiring an Azure VM
Delete a VM and attached resources - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Approve proximity-group removal before preview regional-to-zonal VM migration
Migrate a regional virtual machine to an availability zone - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Assess mirror-accelerated parity against the workload write pattern
Mirror-accelerated parity
Publication date not specified · DSE reviewed September 8, 2026
ChecklistAdvisory
Assign one accountable owner for DNS supporting AD DS
DNS for AD DS Owner Role
Published May 12, 2025 · DSE reviewed August 26, 2026
GuideInformation
Assign ownership for Device Health Attestation reports
Device Health Attestation
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Assign primary computers before expanding roaming user data
Deploy primary computers for Folder Redirection and Roaming User Profiles
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Assign source, destination, and orchestrator roles for Storage Migration Service
Storage Migration Service overview
Publication date not specified · DSE reviewed September 8, 2026
ChecklistAdvisory
Assign Teams meeting policy by organizer, then test lobby and presenter behavior
Manage meeting and events policies in Microsoft Teams
Publication date not specified · DSE reviewed August 25, 2026
BriefingAdvisory
Assign the Windows DNSSEC Key Master only to a qualifying authoritative server
DNSSEC Key Master
Published August 1, 2025 · DSE reviewed August 26, 2026
GuideInformation
Attach the publishing identity to the gallery, not the destination VM
Publish VM applications using managed identity - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistImportant
Audit LSA plug-in compatibility before enforcing protected-process mode
Configure added LSA protection
Publication date not specified · DSE reviewed August 25, 2026
BriefingAdvisory
Audit weak certificate algorithms before enforcing rejection
Disable weak cryptographic algorithms in certificate validation on Windows and Windows Server
Published July 16, 2025 · DSE reviewed August 26, 2026
ChecklistAdvisory
Authorize identity remediation actions by connector and RBAC scope
Remediation actions in Microsoft Defender for Identity
Published July 22, 2026 · DSE reviewed August 26, 2026
GuideInformation
Authorize the customer's local application identity for cross-tenant disk keys
Use a disk encryption set across Microsoft Entra tenants - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Avoid a hidden merge dependency that stops a workbook's downstream result
Azure Workbooks data sources - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Avoid duplicate Okta ingestion when enabling the Defender for Identity connector
Connect Okta to Microsoft Defender for Identity (Preview)
Published July 2, 2026 · DSE reviewed August 26, 2026
GuideInformation
Avoid shared Bicep module deployment names in concurrent runs
Bicep modules - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistAdvisory
Back up both local administrator and DSRM passwords with Windows LAPS
Windows LAPS overview
Published March 10, 2025 · DSE reviewed August 26, 2026
BriefingAdvisory
Back up every production GPO on a defined schedule
Back Up and Restore Group Policy in Windows
Published July 10, 2025 · DSE reviewed August 26, 2026
GuideInformation
Back up the Network Controller database before SDN maintenance
Upgrade, backup, and restore SDN infrastructure
Publication date not specified · DSE reviewed September 8, 2026
PlaybookAdvisory
Back up the root CA before renewing its certificate
Renew root CA certificate in Windows Server
Published March 13, 2025 · DSE reviewed August 26, 2026
GuideInformation
Backfill each member policy when deploying a diagnostic-settings initiative
Enable Diagnostic Settings by Category Group Using Built-in Policies - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Base RDS session-host sizing on the users’ actual workload mix
Session Host Virtual Machine Sizing Guidelines for Remote Desktop
Publication date not specified · DSE reviewed September 8, 2026
ChecklistAdvisory
Baseline Windows DNS-over-HTTPS events and counters separately from port 53
Monitor DNS over HTTPS events and performance in DNS Server on Windows Server
Publication date not specified · DSE reviewed August 26, 2026
GuideInformation
Benchmark SMB compression with representative files and network conditions
SMB Compression
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Bind NPS RADIUS traffic to the intended network interfaces
Configure NPS on a Multihomed Computer
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Bind shielding data to the template disks a tenant actually trusts
Shielded VMs for tenants - Creating shielding data to define a shielded VM
Publication date not specified · DSE reviewed September 8, 2026
GuideImportant
Block external-tenant sign-in paths only after mapping Tenant Restrictions v2 enforcement
Set up tenant restrictions v2
Publication date not specified · DSE reviewed August 25, 2026
GuideInformation
Bound Arc Remote Support access to the active Microsoft support case
How to configure remote support for Arc-enabled Windows servers (preview)
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Bound Bicep diagnostic suppression before accepting a clean build
Bicep file structure and syntax - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Bound Defender certificate inventory to the Windows machine stores it observes
Certificate inventory in Microsoft Defender Vulnerability Management - Microsoft Defender Vulnerability Management | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Bound every log-query branch before trusting a short displayed time range
Optimize log queries in Azure Monitor - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Break the identity-and-certificate dependency cycle before deploying Windows extensions
Azure Key Vault VM extension for Windows - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Bring an already encrypted Mac under Intune FileVault management
Encrypt macOS devices with FileVault using Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Budget Application Gateway v2 subnet addresses for peak instance count
Azure Application Gateway infrastructure configuration | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Budget Azure Compute API traffic at both resource and subscription scope
Compute throttling limits - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Budget local storage explicitly before choosing full caching for an ephemeral OS disk
Ephemeral OS disks - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Budget raw capacity for two-way and three-way mirrors
Fault tolerance and storage efficiency on Azure Local and Windows Server clusters
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Budget the physical footprint before expanding an S2D volume
Manage volumes in Azure Local and Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Build a custom Hyper-V Quick Create gallery from a source manifest
Create a custom virtual machine gallery
Publication date not specified · DSE reviewed September 8, 2026
GuideAdvisory
Build a defensible Microsoft Purview retention and legal-hold decision tree
Microsoft Learn: Create and configure retention policies
Publication date not specified · DSE reviewed August 17, 2026
GuideInformation
Build a Hyper-V capacity envelope from the correct limits
Hyper-V Maximum Scale Limits in Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideAdvisory
Build a repeatable Microsoft Purview audit-search procedure before an incident
Microsoft Learn: Search the audit log
Published June 19, 2026 · DSE reviewed July 19, 2026
PlaybookImportant
Build an evidence-based exit from Windows Server 2016 before January 12, 2027
Microsoft Lifecycle — Windows Server 2016
Published June 4, 2024 · DSE reviewed August 4, 2026
GuideInformation
Build management-group custom policy IDs with the correct ARM resource scope
Deploy resources to management group - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Build separate Intune approval rings for drivers and firmware
Microsoft Learn: Manage Windows driver updates
Published January 14, 2026 · DSE reviewed August 11, 2026
BriefingAdvisory
Calculate GPO scope before linking or filtering policy
Group Policy scope in Windows
Published June 13, 2025 · DSE reviewed August 26, 2026
GuideInformation
Calculate the cluster-wide live-migration bandwidth limit from all relevant adapters
Control Live Migration SMB Bandwidth Control Cluster-wide in Windows Server and Azure Local
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Calculate the upload byte count from the right managed-disk source
Upload a VHD to Azure or copy a disk across regions - Azure PowerShell - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Capture AD Administrative Center actions as reusable PowerShell
Use the Active Directory Administrative Center Windows PowerShell History Viewer in Windows Server
Published September 5, 2024 · DSE reviewed August 26, 2026
ChecklistAdvisory
Capture domain-controller system state with two supported methods
AD Forest Recovery - Backing up the System State data
Published May 12, 2025 · DSE reviewed August 26, 2026
PlaybookAdvisory
Capture ETW evidence for failing LDAP connections
Using ETW to troubleshoot LDAP connections
Published November 22, 2019 · DSE reviewed August 26, 2026
GuideInformation
Capture Health Service metrics as timed snapshots, not historical trends
Health Service reports
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Capture the actual Zebra LifeGuard deployment population at creation
Zebra LifeGuard Over-the-Air Integration with Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Centralize multi-forest GPO administration in GPMC
Group Policy Management Console in Windows
Published May 14, 2025 · DSE reviewed August 26, 2026
ChecklistAdvisory
Centralize TPM command and lockout controls with Group Policy
TPM Group Policy settings
Published August 15, 2025 · DSE reviewed August 26, 2026
ExplainerAdvisory
Change Windows DNS zones through an explicit storage and replication plan
Manage DNS zones using DNS server in Windows Server
Published January 2, 2025 · DSE reviewed August 26, 2026
GuideInformation
Check action Run Command's result path before repeating a Windows repair
Run scripts in a Windows VM in Azure using action Run Commands - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Check an active metric alert before changing repeat-notification behavior
Troubleshoot Azure Monitor metric alerts - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check antivirus mode before troubleshooting an ignored signature-update schedule
Microsoft Defender Antivirus compatibility with other security products - Microsoft Defender for Endpoint | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check assignment existence before interpreting an ABAC deletion 403
Troubleshoot Azure role assignment conditions - Azure ABAC | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check Azure Files failover history before proposing zone redundancy
Change Redundancy Configuration for Azure Files | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check Azure Files per-protocol encryption settings instead of assuming creation defaults match
Networking Considerations for Azure Files | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check Azure Firewall network matches before tightening an application rule
Azure Firewall rule processing logic | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check Azure UDR next-hop reachability before routing through an appliance
Azure virtual network traffic routing | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check Backup vault lifecycle constraints before enabling customer-managed encryption
Encrypt backup data in a Backup vault by using customer-managed keys - Azure Backup | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check both ends of a Hyper-V integration service
Manage Hyper-V Integration Services
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Check both Kubernetes collection controls before excluding a namespace
Filter and customize data collection for Kubernetes clusters - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check broad matches in Azure Route Server route maps before a preview pilot
Configure route maps for Azure Route Server | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check CPU capability and framework use separately when evaluating Intel AMX
Intel AMX on Azure overview - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check cross-service consumers before replacing an Intune targeting group
Choose the right targeting method in Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check dashboard identity collisions before copying into Managed Grafana
Copy an Azure Monitor dashboard to Azure Managed Grafana - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check Defender incident PDF coverage and freshness before using it as evidence
Manage incidents in Microsoft Defender - Microsoft Defender XDR | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check destination hardlinks outside an AzCopy transfer before replacing file content
Transfer data to or from Azure Files by using AzCopy v10 | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check device ownership after a local or remote Autopilot Reset
Windows Autopilot Reset | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check directory synchronization before relying on a Cloud Apps user suspension
Governing connected apps - Microsoft Defender for Cloud Apps | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistInformation
Check each action type before calling an Azure Monitor action group perimeter-isolated
Configure Azure Monitor with Network Security Perimeter - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check EAP profile trust after a Windows 11 upgrade
EAP - What's changed in Windows 11
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Check Elastic SAN's iSCSI feature exclusions before copying a target design
Plan for an Azure Elastic SAN deployment | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check enrollment-time grouping before choosing Android work-profile staging
Set up Android Enterprise work profile for corporate owned devices - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check EPM parent rules before relying on a child-process denial
Creating elevation rules with Endpoint Privilege Management - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check every app relationship's install context on multi-session desktops
Using Azure Virtual Desktop multi-session with Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingInformation
Check every Fluent Bit collector before enabling pod log-exclusion annotations
Configure container log collection with ConfigMap - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check every linked application before requesting an on-demand .NET profile
.NET Profiler settings - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check existing Windows update offers before postponing a gradual rollout
Configure Rollout Options for Feature Update Policies - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check File Sync progress inside a failed session
Monitor Azure File Sync | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check for an unsupported subnet storage policy before retrying Elastic SAN iSCSI login
Troubleshoot Azure Elastic SAN | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check for duplicate Company Portal configuration during Apple ADE
Set up automated device enrollment (ADE) for iOS/iPadOS - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistInformation
Check gallery and scale-set compatibility before enabling image soft delete
Soft Delete in Azure Compute Gallery (Preview) - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check group type and timing before relying on an Intune exclusion
Assign device profiles in Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check GRUB identifiers when Site Recovery reports error 95320
Troubleshoot Mobility Service push installation with Azure Site Recovery - Azure Site Recovery | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Check how workbook composite bars aggregate their components and labels
Azure Workbooks composite bar renderer - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check hybrid connectivity before creating an Azure VM in Windows Admin Center
Deploy Azure Virtual Machines using Windows Admin Center
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Check IDPS private ranges before interpreting Azure Firewall traffic direction
Azure Firewall Premium features implementation guide | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check immovable files before planning a basic-volume shrink
Shrink a Basic Volume
Publication date not specified · DSE reviewed September 8, 2026
BriefingInformation
Check inherited full access before narrowing a Cloud Apps administrator locally
Configure admin access - Microsoft Defender for Cloud Apps | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistInformation
Check installation and policy paths before declaring Dependency Agent removed
Remove Dependency Agent from Azure Virtual Machines and Virtual Machine Scale Sets - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check iSCSI client digest support before enforcing Elastic SAN CRC protection
Azure Elastic SAN networking concepts | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check locked metric-chart bounds before diagnosing missing telemetry
Troubleshooting Azure Monitor metric charts - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check metadata activity before choosing a Scale-Out File Server
Scale-Out File Server for application data overview for Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Check missing summary-rule intervals before accepting a Log Analytics trend
Aggregate data in a Log Analytics workspace with summary rules - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check NetApp export policy before granting ownership changes in an NFS ACL
Understand NFSv4.x access control lists in Azure NetApp Files | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check Network ATC prerequisites before creating the first intent
Deploy host networking with Network ATC
Publication date not specified · DSE reviewed September 8, 2026
BriefingInformation
Check predefined app-policy state before claiming its detection is enabled
Investigate predefined OAuth app policy alerts with app governance - Microsoft Defender for Cloud Apps | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check prerequisites before enabling kernel hardware stack protection
Kernel Mode Hardware-enforced Stack Protection
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Check procurement registration before promising DFCI management
DFCI Management | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check protection and repair service state before expecting an unhealthy instance to recover
Automatic instance repairs with Azure Virtual Machine Scale Sets - Azure Virtual Machine Scale Sets | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check recall-memory pressure before assuming a File Sync read warmed the cache
Understand Azure File Sync Cloud Tiering | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check retained machine identity before reusing an Azure Windows OS disk
Attach an existing OS disk to a VM - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check reverse-proxy request handling before publishing Intune SCEP
Configure infrastructure to support SCEP certificate profiles with Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check SQL replica versions before configuring backup without the primary
Back up SQL Server always on availability groups - Azure Backup | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check subscription admission before planning growth on restricted older VM series
Previous-generation VM size series capacity growth restrictions and migration guidance - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check that NPS can select an auto-enrolled server certificate
Configure Certificate Auto-Enrollment for Network Policy Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Check the any-tag cohort behind a managed-application metrics view
Overview of view definition - Azure Managed Applications | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check the app model before choosing non-wiping Apple direct enrollment
iOS/iPadOS direct enrollment - Apple Configurator-Setup Assistant - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check the attestation version before registering a host TPM with HGS
Capture TPM-mode information required by HGS
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Check the certificate Application Gateway v2 returns without SNI
Enabling end to end TLS on Azure Application Gateway | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check the client encoding before renaming an unfamiliar NetApp filename
Understand volume languages in Azure NetApp Files | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check the compiled language version before packaging a managed application
Use Bicep to create and publish an Azure Managed Application definition - Azure Managed Applications | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check the disk controller before interpreting missing Azure latency metrics
Disk metrics - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check the DNS endpoint shape before putting a resolver balancer in front of NetApp Files
Understand Domain Name Systems in Azure NetApp Files | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check the encoded payload size before using Linux Custom Script's inline script setting
Run Custom Script Extension on Linux VMs in Azure - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistInformation
Check the exceptions before starting self-service VM maintenance
Maintenance notifications - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check the explicit EPM report permission when a reader receives HTTP 403
Monitor your Endpoint Privilege Management policies for Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check the first-consumer message before treating a restored Container Storage claim as failed
Use volume snapshots with Azure Container Storage (version 2.x.x) with Azure Elastic SAN | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check the helper's tenant before outsourcing Remote Help support
Plan for Remote Help with Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistInformation
Check the InfiniBand placement boundary before troubleshooting MPI reachability
Set up InfiniBand on HPC VMs - Azure Virtual Machines - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check the IP-configuration boundary of Load Balancer outbound rules
Outbound Rules for Azure Load Balancer | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check the kernel series before relying on Site Recovery's support target
Support Matrix for Azure VM Disaster Recovery with Azure Site Recovery - Azure Site Recovery | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check the limits of SDN virtual network peering
Virtual network peering
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Check the local request path before diagnosing an Azure metadata timeout
Azure Instance Metadata Service for virtual machines - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check the position of unallocated space before extending a Windows volume
Extend a basic or dynamic volume in Windows and Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Check the preview and access requirements for portal-based WAC management
Manage Azure Arc-enabled Servers using Windows Admin Center in Azure
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Check the registry support boundary before retrying a private ACI image pull
Troubleshoot common issues - Azure Container Instances | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check the replica's usable log history before a workspace switchover
Enhance resilience by replicating your Log Analytics workspace across regions - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookInformation
Check the restoration scope before undoing a Defender false positive
Address false positives/negatives in Microsoft Defender for Endpoint - Microsoft Defender for Endpoint | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check the subject and user-name fields in NPS certificate templates
Configure Certificate Templates for PEAP and EAP requirements
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Check the user certificate store when Cloud Apps device identification does not prompt
Troubleshoot access and session controls for admins - Microsoft Defender for Cloud Apps | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check VM watch's selected authentication method before rotating an Event Hubs credential
Configure Event Hubs for VM watch - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check volume-root FSRM quotas when File Sync tiering never settles
Choose Azure File Sync Cloud Tiering Policies | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check what remains in a cluster WER report before relying on it
Troubleshooting a Failover Cluster using Windows Error Reporting
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Check where SDN virtual network encryption stops
Configure Encryption for a Virtual Network
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Check whether NVMe health polling is disturbing an L-series storage test
Optimize performance on Lsv3, Lasv3, and Lsv2-series Windows VMs - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check whether one unsubscribe stopped an action group's entire distribution list
Troubleshooting Azure Monitor alerts and notifications - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check which VMs lose alert coverage when subscription recommendations skip host metrics
Monitoring coverage in Azure Monitor (preview) - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Check Windows 11 guest CPU features before changing Hyper-V compatibility settings
Supported Windows guest operating systems for Hyper-V on Windows, Windows Server, and Azure Local
Publication date not specified · DSE reviewed September 8, 2026
ChecklistAdvisory
Check Windows Autopatch prerequisites before registering production devices
Microsoft Learn: Windows Autopatch prerequisites
Published February 27, 2026 · DSE reviewed July 19, 2026
GuideInformation
Choose a DFS namespace type before designing its availability
Choose a Namespace Type
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Choose a Hyper-V VM generation from guest and boot requirements
Should I create a generation 1 or 2 virtual machine in Hyper-V?
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Choose a networking approach before enabling nested Hyper-V
Run Hyper-V in a Virtual Machine with Nested Virtualization
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Choose a Windows Admin Center gateway location
What type of installation is right for you
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Choose ACI diagnostic settings when the workspace cannot accept legacy key-based logging
Collect & analyze resource logs - Azure Container Instances | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Choose AD group scope from the resource and trust boundary
Active Directory Security Groups
Published July 2, 2025 · DSE reviewed August 26, 2026
GuideInformation
Choose an Offline Files synchronization policy for metered connections
Enable Background File Synchronization on Metered Networks in Windows and Windows Server
Publication date not specified · DSE reviewed September 8, 2026
ExplainerInformation
Choose an owned workspace before requiring protected Application Insights tables
Application Insights managed workspaces - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Choose and secure a DFS namespace root before adding folder targets
Create a DFS Namespace in Windows Server
Publication date not specified · DSE reviewed September 8, 2026
ChecklistAdvisory
Choose automatic or manual sensor activation from the domain-controller inventory
Activate the Defender for Identity sensor v3.x on a domain controller
Published July 2, 2026 · DSE reviewed August 26, 2026
GuideInformation
Choose block access or DAX before deploying persistent-memory storage
Understand and deploy persistent memory
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Choose declarative update management before rebuilding macOS update policies
Admin guide and checklist for macOS software updates - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Choose Dedicated Host failure replacement before relying on automatic recovery
Overview of Azure Dedicated Hosts for virtual machines - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Choose dedicated or partitioned GPU access for Hyper-V workloads
Plan for GPU acceleration in Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Choose deployment-script cleanup without losing the failure investigation plan
Develop a deployment script in Bicep - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Choose DFS referral ordering without losing an off-site access path
Set the Ordering Method for Targets in Referrals
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Choose ExpressRoute Direct encapsulation with the correct VLAN uniqueness boundary
Configure Azure ExpressRoute Direct | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Choose GRE endpoints for a tenant-to-physical-network connection
GRE Tunneling in Windows Server 2016
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Choose how expired Service Fabric health reports affect evaluation
Health monitoring in Service Fabric - Azure Service Fabric | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Choose Hyper-V import identity and running-file locations
Export and import virtual machines
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Choose Machine Configuration drift behavior explicitly
Remediation options for machine configuration - Azure Machine Configuration | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Choose manual or automatic LAPS account management explicitly
Windows LAPS account management modes
Published May 12, 2025 · DSE reviewed August 26, 2026
GuideAdvisory
Choose Microsoft 365 Apps update channels by job, then manage the exceptions
Microsoft Learn: Overview of update channels for Microsoft 365 Apps
Published May 27, 2026 · DSE reviewed August 11, 2026
GuideInformation
Choose node recovery or cluster-configuration recovery deliberately
Disaster Recovery Scenarios for Storage Spaces Direct in Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Choose notification or enforcement when creating an FSRM file screen
Create a File Screen
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Choose one MSP configuration representation for each metadata service
MSP Feature Configuration - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Choose parallel or fallback destinations for NPS accounting
Configure Network Policy Server Accounting
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Choose personal RDS host assignment and privileges independently
Use personal session desktops with Remote Desktop Services
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Choose single-app mode by who must be able to exit it
Configure security, email, VPN, and Wi-Fi device configuration profiles - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Choose Spot eviction state from the workload's restart plan
About Azure Spot Virtual Machines - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Choose Storage bus cache provisioning mode before enabling the feature
Storage bus cache on Storage Spaces
Publication date not specified · DSE reviewed September 8, 2026
GuideAdvisory
Choose Teams external access, guest access, or neither for each collaboration need
Microsoft Learn: Use guest access and external access to collaborate with people outside your organization
Published July 1, 2026 · DSE reviewed July 19, 2026
GuideInformation
Choose the authoritative node before forced-quorum recovery
Recover a failover cluster without quorum in Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Choose the correct allocation path when associating an existing VM with reserved capacity
Associate a virtual machine to a capacity reservation group - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Choose the correct Storage Spaces Direct deployment branch
Deploy Storage Spaces Direct on Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Choose the disk and installation path for a new Hyper-V guest
Create a virtual machine in Hyper-V
Publication date not specified · DSE reviewed September 8, 2026
ChecklistInformation
Choose the disk encryption set's type before enabling double encryption
Enable double encryption at rest for managed disks - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Choose the IME log that matches the failed Windows workload
Understand Microsoft Intune Management Extension - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Choose the key identity before creating an encrypted Elastic SAN volume group
Configure Customer-Managed Keys for Azure Elastic SAN | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Choose the OTLP transport for the actual Azure Monitor ingestion path
Collect and analyze OpenTelemetry data with Azure Monitor (Preview) - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Choose the regional or zonal path before converting an Azure disk to ZRS
Convert a disk from LRS to ZRS - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerAdvisory
Choose the SYSVOL authoritative-restore method from restore type
AD Forest Recovery - Performing an authoritative synchronization of DFSR-replicated SYSVOL
Published June 21, 2023 · DSE reviewed August 26, 2026
GuideInformation
Choose the version-appropriate path for moving a cluster between domains
Cross Domain Cluster Migration in Windows Server 2016/2019
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Choose UEFI key replacement or extension deliberately in a gallery image
Secure Boot UEFI keys - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Choose what happens when a resource leaves an Azure deployment stack
Create and deploy Azure deployment stacks in Bicep - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Choose where a branch office will keep its BranchCache content
BranchCache
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Choose where VDI image optimizations belong before changing desktop settings
Optimizing Windows configuration for VDI desktops
Publication date not specified · DSE reviewed September 8, 2026
ExplainerInformation
Choose whether an Azure Monitor SLI counts requests or time windows
Create service level indicators in Azure Monitor - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Choose whether cluster anti-affinity should yield during a node outage
Cluster affinity
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Choose whether cluster compute and storage should scale together
Failover Clustering Storage Architectures in Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideAdvisory
Choose Windows DNS forwarders, conditional forwarders, and delegation boundaries deliberately
DNS Forwarding in Windows Server
Published May 13, 2026 · DSE reviewed August 26, 2026
PlaybookAdvisory
Choose Windows primary, secondary, stub, and AD-integrated zones by replication need
DNS zones in DNS Server on Windows Server
Published March 24, 2025 · DSE reviewed August 26, 2026
GuideInformation
Choose Work Folders server placement around site dependencies
Planning a Work Folders deployment
Publication date not specified · DSE reviewed September 8, 2026
GuideAdvisory
Clean AD metadata immediately after forced domain-controller removal
Clean up AD DS server metadata
Published May 12, 2025 · DSE reviewed August 26, 2026
GuideInformation
Clean up stale Intune records without mistaking hiding for retirement
Microsoft Learn: Device cleanup rules
Published May 5, 2026 · DSE reviewed July 19, 2026
GuideInformation
Clear device association on the device before it permanently leaves the tenant
Overview of Windows Autopilot device association | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingAdvisory
Clear-ADAccountExpiration: clear adaccount expiration under AD/DNS change control
Clear-ADAccountExpiration
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Clear-ADClaimTransformLink: clear adclaim transform link with bounded evidence
Clear-ADClaimTransformLink
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Clear-DnsServerCache: clear dns server cache against recorded identity and DNS state
Clear-DnsServerCache
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Clear-DnsServerStatistics: clear dns server statistics with bounded evidence
Clear-DnsServerStatistics
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Close Azure VM file-recovery access after copying the required files
Recover files and folders from Azure VM backup - Azure Backup | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Collect both ends of an SMB failure before interpreting retransmissions
Advanced Troubleshooting Server Message Block (SMB)
Publication date not specified · DSE reviewed September 8, 2026
BriefingAdvisory
Collect Windows DNS audit and analytic events with a measured volume budget
Enable DNS Logging and Diagnostics in Windows Server
Published February 27, 2025 · DSE reviewed August 26, 2026
ChecklistAdvisory
Combine PAM access controls with Defender for Identity behavior analytics
Integrate Defender for Identity with PAM services
Published March 30, 2025 · DSE reviewed August 26, 2026
GuideInformation
Compare an iSCSI Target design with supported and enforced limits
iSCSI Target Server Scalability Limits
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Compare application crash frequency against actual engagement time
Application Reliability Report in Endpoint Analytics - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Compare modeled and actual Group Policy results
Group Policy Modeling and Results in Windows
Published April 16, 2024 · DSE reviewed August 26, 2026
GuideInformation
Compare virtual NUMA topology with the host before changing memory placement
Configure NUMA to Optimize Hyper-V Memory
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Complete both sides of a JSON-based Blob object-replication policy
Configure object replication - Azure Storage | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Complete the trust chain before enabling a Cloud PKI BYOCA issuer
Bring your own certificate authority with Cloud PKI - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Complete the Work Folders relying-party configuration beyond the AD FS wizard
Deploy Work Folders with AD FS and Web Application Proxy - Step 2, AD FS Post-Configuration Work
Publication date not specified · DSE reviewed September 8, 2026
ExplainerAdvisory
Configure advanced Windows auditing before expecting identity detections
Configure Windows event auditing
Published August 10, 2026 · DSE reviewed August 26, 2026
GuideAdvisory
Configure gMSA Kerberos delegation without relying on the missing tab
Configuring Kerberos Delegation for Group Managed Service Accounts
Published July 9, 2025 · DSE reviewed August 26, 2026
GuideInformation
Confirm drive and vendor compatibility before a Windows firmware update
Updating drive firmware
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Confirm RDMA use before crediting a file transfer to SMB Direct
Improve performance of a file server with SMB Direct
Publication date not specified · DSE reviewed September 8, 2026
ChecklistAdvisory
Connect CyberArk Identity only with the required API roles and permissions
Connect CyberArk Identity to Microsoft Defender for Identity (Preview)
Published July 2, 2026 · DSE reviewed August 26, 2026
GuideAdvisory
Connect each identity provider before relying on cloud-identity posture assessments
Microsoft Defender for Identity security assessments for cloud identities
Published July 30, 2026 · DSE reviewed August 26, 2026
BriefingAdvisory
Connect SailPoint with a dedicated API principal and least-required roles
Connect SailPoint Identity Security Cloud to Microsoft Defender for Identity (Preview)
Published July 2, 2026 · DSE reviewed August 26, 2026
ExplainerAdvisory
Constrain ADUC user administration to the assigned operator role
Manage User Accounts with Active Directory Users and Computers in Windows Server
Published June 30, 2025 · DSE reviewed August 26, 2026
PlaybookAdvisory
Constrain NDES certificate enrollment to approved network devices
What is Network Device Enrollment Service for Active Directory Certificate Services?
Published January 3, 2025 · DSE reviewed August 26, 2026
GuideInformation
Control the extension feed used by Windows Admin Center
Install and Manage Extensions
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Control when a System Insights capability runs
Manage System Insights capabilities in Windows Admin Center
Publication date not specified · DSE reviewed September 8, 2026
ChecklistAdvisory
Control Windows dynamic DNS registration, ownership, and name-conflict handling
Dynamic DNS Update in Windows and Windows Server
Published March 24, 2025 · DSE reviewed August 26, 2026
GuideInformation
Convert Elastic SAN transaction buckets into correctly scoped average rates
Metrics for Azure Elastic SAN | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
ConvertTo-DnsServerSecondaryZone: convertto dns server secondary zone with before-and-after evidence
ConvertTo-DnsServerSecondaryZone
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Coordinate both owners before removing a preview perimeter link
Configure a perimeter link between network security perimeters - Azure Private Link | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Coordinate every member disk when changing Write Accelerator on a striped log volume
Azure Write Accelerator - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Coordinate PROXY v2 across shared Private Link service backends
What is Azure Private Link service? | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Correct artifact-path joining when an existing Visual Studio project adopts the Az script
Create & deploy Visual Studio resource group projects - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingAdvisory
Correlate CyberArk-managed accounts with AD and Entra identities
How Microsoft Defender for Identity protects your CyberArk identity accounts (Preview)
Published February 15, 2026 · DSE reviewed August 26, 2026
ExplainerAdvisory
Correlate Okta activity with Active Directory and Entra identity context
How Microsoft Defender for Identity protects your Okta accounts
Published August 7, 2025 · DSE reviewed August 26, 2026
GuideInformation
Count hot destination pairs when reviewing Load Balancer SNAT pressure
Source Network Address Translation (SNAT) for outbound connections - Azure Load Balancer | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Create a cluster volume from an approved specification
Create volumes on Azure Local and Windows Server clusters
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Create a new gallery image definition when its platform identity must change
Troubleshoot problems with shared images in Azure - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Create custom account-correlation rules only when strong identifiers are unavailable
Manage account correlation rules in Microsoft Defender for Identity (Preview)
Published July 23, 2026 · DSE reviewed August 26, 2026
GuideInformation
Create Site Recovery private access before registering protected items
Enable replication for on-premises machines with private endpoints - Azure Site Recovery | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Create the Azure dashboard resource before using Grafana's content-update API
Call Grafana APIs programmatically - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Decide how to use Arc best-practice assessments without treating findings as change approval
How to configure best practices assessment for Arc-enabled Windows servers
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Decide NetApp LDAP volume behavior before creating or cloning the volume
Troubleshoot volume errors for Azure NetApp Files | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Decide the Android app's distribution future before private publication
Add and Assign Managed Google Play Apps to Android Enterprise Devices - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Decide whether an Application Gateway URL rewrite should reroute the request
Rewrite HTTP headers and URL with Azure Application Gateway | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Decide whether an external Hyper-V switch should share its adapter
Create and configure a virtual switch with Hyper-V
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Decide whether an FSRM classification rule may replace existing values
Create an Automatic Classification Rule
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Decide whether an S2D server removal also removes its drives
Removing servers in Storage Spaces Direct
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Decide whether Windows Network Load Balancing fits the application
Network Load Balancing
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Decode endpoint analytics export sentinels before calculating summaries
Troubleshooting Endpoint Analytics - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Decode NetApp's backup-suspended metric before writing an alert
Metrics for Azure NetApp Files | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerAdvisory
Decode Windows DNS query, response, and update messages before troubleshooting
DNS Message Formats in Windows and Windows Server
Published July 2, 2025 · DSE reviewed August 26, 2026
GuideAdvisory
Define Delivery Optimization peer boundaries before Windows content moves
What is Delivery Optimization?
Publication date not specified · DSE reviewed August 25, 2026
GuideInformation
Define NPS proxy server groups before distributing authentication load
NPS Proxy Server Load Balancing
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Define quota-template notifications before a file share reaches its limit
Create a Quota Template
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Define rack fault domains before enabling campus-cluster storage
Create a Storage Spaces Direct Campus Cluster
Publication date not specified · DSE reviewed September 8, 2026
ExplainerInformation
Define request success before interpreting Application Insights outcomes
Application Insights telemetry data model - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingAdvisory
Define supported Hyper-V Replica use for domain-controller VMs
Support for using Hyper-V Replica for virtualized domain controllers
Published May 12, 2025 · DSE reviewed August 26, 2026
GuideInformation
Define the completion and return path before converting a disk to Premium SSD v2
Convert managed disks storage between different disk types - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Define the isolation boundary of Virtual WAN's branch-to-branch switch
Architecture: Global transit network architecture - Azure Virtual WAN | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistAdvisory
Define the supported post-quantum certificate scope in AD CS
Post-Quantum Cryptography in AD CS overview - Windows Server
Published May 12, 2026 · DSE reviewed August 26, 2026
GuideImportant
Delegate a PowerShell task through JEA—not a broad administrator group
Just Enough Administration
Publication date not specified · DSE reviewed August 25, 2026
PlaybookAdvisory
Delegate AD administration at the narrowest OU boundary
Delegation of Control in AD DS on Windows Server
Published July 9, 2025 · DSE reviewed August 26, 2026
PlaybookAdvisory
Delegate domain join with object-level permissions, not broad quotas
Active Directory domain join permissions in Windows Server
Published August 26, 2025 · DSE reviewed August 26, 2026
ChecklistAdvisory
Delete unreachable DC objects during forest-recovery cleanup
AD Forest Recovery - Cleaning metadata of removed writable domain controllers
Published June 21, 2023 · DSE reviewed August 26, 2026
ExplainerAdvisory
Deploy Azure-hosted domain controllers across an availability set
Install Active Directory Domain Services on an Azure virtual machine
Published May 12, 2025 · DSE reviewed August 26, 2026
PlaybookAdvisory
Deploy phishing-resistant authentication by user and device readiness
Microsoft Learn: Plan a phishing-resistant passwordless authentication deployment in Microsoft Entra ID
Published March 26, 2026 · DSE reviewed July 19, 2026
ChecklistAdvisory
Deploy SMB over QUIC only after identity, port, and fallback testing
Microsoft Learn: SMB over QUIC
Published July 24, 2025 · DSE reviewed August 11, 2026
ExplainerAdvisory
Deploy the vulnerable driver blocklist through supported App Control
Microsoft recommended driver block rules
Published May 1, 2026 · DSE reviewed August 26, 2026
GuideAdvisory
Deploy Windows LAPS through Intune without creating policy conflicts
Microsoft Learn: Deploy Windows LAPS policy with Microsoft Intune
Published April 15, 2026 · DSE reviewed July 19, 2026
GuideAdvisory
Deploy Windows NRPT rules as testable name-resolution policy
Configure DNSSEC rules using the Name Resolution Policy Table in Windows
Published August 1, 2025 · DSE reviewed August 26, 2026
GuideImportant
Design Azure Private Endpoint DNS before the first private link
Microsoft Learn: Azure Private Endpoint private DNS zone values
Published August 10, 2026 · DSE reviewed August 11, 2026
ExplainerAdvisory
Design Certificate Enrollment Web Service for off-domain clients
Certificate Enrollment Web Service overview
Published March 28, 2025 · DSE reviewed August 26, 2026
PlaybookAdvisory
Design cross-tenant access settings before B2B collaboration scales
Microsoft Learn: Manage cross-tenant access settings for B2B collaboration
Publication date not specified · DSE reviewed August 17, 2026
GuideInformation
Design for the finite retry window of managed-application notifications
Azure managed applications with notifications - Azure Managed Applications | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideImportant
Design shielded-VM key recovery before protecting the fabric from its admins
Guarded Fabric and Shielded VMs overview
Publication date not specified · DSE reviewed August 25, 2026
GuideInformation
Design the access path for a dedicated WAC gateway in Azure
Deploy a Windows Admin Center gateway in Azure
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Detach a VM before changing its Flexible scale-set membership
Attach or detach a virtual machine to or from a Virtual Machine Scale Set - Azure Virtual Machine Scale Sets | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Diagnose an invalid Change ID in the VM Conversion preview
Troubleshoot the VM Conversion Extension in Windows Admin Center (Preview)
Publication date not specified · DSE reviewed September 8, 2026
PlaybookAdvisory
Disable an enabled domain Guest account surfaced by identity infrastructure assessments
Identity infrastructure security assessments
Published September 10, 2025 · DSE reviewed August 26, 2026
PlaybookImportant
Disable Azure Storage Shared Key only after every caller identifies itself
Prevent Shared Key authorization for an Azure Storage account
Publication date not specified · DSE reviewed August 25, 2026
BriefingAdvisory
Disable-DnsServerPolicy: disable dns server policy under AD/DNS change control
Disable-DnsServerPolicy
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Disable-DnsServerSigningKeyRollover: disable dns server signing key rollover with before-and-after evidence
Disable-DnsServerSigningKeyRollover
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Discover the HPC fabric partition key instead of copying an MPI example value
Set up Message Passing Interface (MPI) for HPC - Azure Virtual Machines - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Distinguish a cluster name object from the administrator who creates it
Failover cluster accounts overview
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Distinguish a Hyper-V heartbeat from a graceful guest shutdown
Hyper-V Integration Services
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Distinguish a managed-application package URL from its BYOS definition store
Bring your own storage to create and publish an Azure Managed Application definition - Azure Managed Applications | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Distinguish a new pipeline sender from a gateway port expansion
Configure a Kubernetes gateway for Azure Monitor pipeline - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Distinguish a Policy reevaluation from a fresh guest configuration audit
Azure Machine Configuration prerequisites - Azure Machine Configuration | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Distinguish a rejected Prometheus sample from a failed scrape job
Troubleshoot collection of Prometheus metrics in Azure Monitor - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Distinguish a Storage Spaces pool from the resiliency of each virtual disk
Storage Spaces overview
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Distinguish a WAF rule match from the final anomaly-score action
CRS and DRS rule groups and rules - Azure Web Application Firewall | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Distinguish an alert's query target from its affected configuration items
Common alert schema for Azure Monitor alerts - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Distinguish an intentionally dismounted Storage Replica destination from a failed copy
Server-to-Server Storage Replication
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Distinguish an SSH default reset from restoration of the previous configuration
Reset access to an Azure Linux VM - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Distinguish Android update postponement from a system-update freeze
Admin checklist for Android software updates in Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Distinguish Azure Files SMB administration from an ACL bypass
Configure Directory and File-Level Permissions for Azure Files | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Distinguish creating an NPS template from applying it
Manage NPS Templates
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Distinguish Dedicated Host restart from hardware relocation
Deploy Azure dedicated hosts - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Distinguish DSCP marking from outbound throttling in Windows QoS policy
Manage QoS Policy
Publication date not specified · DSE reviewed September 8, 2026
BriefingInformation
Distinguish hardware inventory from firmware vulnerability coverage
Firmware and hardware assessment - Microsoft Defender Vulnerability Management | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Distinguish Logs ingestion authorization failures from a wrongly addressed request
Tutorial: Send data to Azure Monitor Logs with Logs ingestion API (Azure portal) - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Distinguish NPS revocation exceptions before changing the registry
Configure Network Policy Server Certificate Revocation List registry settings for Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Distinguish SDN load balancing from outbound NAT and full VIP forwarding
Configure the Software Load Balancer for Load Balancing and Network Address Translation (NAT)
Publication date not specified · DSE reviewed September 8, 2026
ExplainerInformation
Distinguish suppressed and limited dependency impact in a health-model preview
Configure health rollup in an Azure Monitor health model (preview) - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Distinguish the new TeamViewer connector from its retained predecessor
Use the latest TeamViewer integration in Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Distribute trusted certificates through a controlled GPO
Distribute certificates to Windows devices by using Group Policy
Published February 16, 2024 · DSE reviewed August 26, 2026
GuideInformation
Do not assume a base blob's lease governs its snapshot
Manage block blobs with Azure CLI - Azure Storage | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not assume a NetApp capacity pool expands when its volumes fill
What changing to volume hard quota means for your Azure NetApp Files service | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingInformation
Do not assume an Azure Monitor Agent proxy setting covers every destination
Azure Monitor Agent Network Configuration - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not assume every Service Fabric node retains the same old certificates
Manage certificates in a Service Fabric cluster - Azure Service Fabric | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not assume Route Server VPN preference excludes NVA routes
Routing preference with Azure Route Server - Azure Route Server | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not close security findings from Azure Advisor preview completion state
Azure Advisor recommendation state management - Azure Advisor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistAdvisory
Do not confuse Group Policy preferences with enforced policy
Group Policy preferences in Windows
Published June 16, 2025 · DSE reviewed August 26, 2026
BriefingInformation
Do not count iOS open-network timeline entries as every Wi-Fi reconnection
Configure Microsoft Defender for Endpoint on iOS features - Microsoft Defender for Endpoint | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not delete and recreate a File Sync server endpoint as a sync repair
Deprovision an Azure File Sync Server Endpoint | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not equate a MARS volume snapshot with application-consistent backup
Architecture Overview - Azure Backup | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not equate CUDA capability with a graphics-rendering requirement
NVIDIA CUDA on Azure overview - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not equate Log Analytics export failures with a count of lost records
Log Analytics Data Export Rules in Azure Monitor - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not equate managed-application JIT notifications with manual approval
Approve just-in-time access - Azure Managed Applications | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not expect a Monitor only Cloud Apps session policy to record file activity
Create session policies - Microsoft Defender for Cloud Apps | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not expect Azure Firewall private SNAT ranges to preserve application-rule source addresses
Azure Firewall SNAT private IP address ranges | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not expect new SQL snapshot retention categories to relabel older points
Manage and monitor SQL Server database and instance snapshot (preview) on an Azure VM - Azure Backup | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Do not mistake a Log Analytics cluster link for historical re-encryption
Azure Monitor Logs Dedicated Clusters - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Do not mistake a pipeline group's one-instance limit for a dedicated Kubernetes node
Azure Monitor pipeline pod placement - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not mistake a Table Storage RowKey OR filter for indexed point lookups
Design Azure Table storage for queries | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not mistake EPM's default response for a universal application block
Managing Elevation Settings for Endpoint Privilege Management - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Do not mistake Linux archive-scan settings for real-time archive inspection
Configure security settings in Microsoft Defender for Endpoint on Linux - Microsoft Defender for Endpoint | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingInformation
Do not mistake resource-wide Failure Anomalies detection for per-API coverage
Smart Detection of Failure Anomalies in Application Insights - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not multiply NFSv4.1 session concurrency by the connection count
Linux concurrency best practices for Azure NetApp Files - Session slots and slot table entries | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not plan an in-place conversion to the direct shared gallery preview
Share Azure Compute Gallery Resources Directly with Subscriptions and Tenants - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Do not read an Application Map filter percentile as request latency
Application map in Azure Application Insights - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not read N/A in Service Health impacted resources as an availability verdict
Impacted Resources from Service issues - Azure Service Health | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not read zero property changes as no Azure resource event
Get resource changes - Azure Resource Graph | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not retire a snapshot parent just because its restored volume is accessible
Understand Azure NetApp Files snapshot-based data protection | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not schedule a full Service Fabric shutdown around ephemeral cluster state
Common questions about Microsoft Azure Service Fabric - Azure Service Fabric | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not transplant GPO precedence into Intune catalog assignments
Walkthrough-Create a settings catalog policy - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingInformation
Do not treat a Fabric monitor mirror as an independently retained log copy
Mirror Azure Monitor Data in Microsoft Fabric (Preview) - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not treat a gallery image's end-of-life date as a deployment block
Share VM images in a compute gallery - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not treat a missing Service Fabric node property as a negative match
Describe a cluster by using Cluster Resource Manager - Azure Service Fabric | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not treat a polled ExpressRoute route-count alert as a deployment gate
Configure custom alerts to monitor advertised routes - Azure ExpressRoute | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not treat a successful Azure Firewall packet capture as coverage of every instance
Use Packet Capture to Troubleshoot Azure Firewall | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not treat an app-governance activity count as a retained Graph audit trail
Investigate OAuth app threat detection alerts with app governance - Microsoft Defender for Cloud Apps | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not treat Azure Firewall's DNS server list as an ordered fallback chain
Azure Firewall policy DNS settings | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not treat Azure role exclusions as explicit denials
Understand Azure role definitions - Azure RBAC | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not treat Azurite OAuth acceptance as a production authorization test
Install and run the Azurite emulator for Azure Storage | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not treat Blob change feed as a complete access audit
Change feed in Blob Storage - Azure Storage | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not treat Intune custom notifications as confirmed urgent delivery
Device Action: Send Custom Notification - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not treat Manual scale-set upgrade mode as a freeze on automatic upgrades
Configure rolling upgrades on Virtual Machine Scale Sets - Azure Virtual Machine Scale Sets | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not treat Sentinel automation action order as a long-playbook completion barrier
Automate threat response in Microsoft Sentinel with automation rules | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not treat the Tunnel upgrade-window end as a completion deadline
Install the Microsoft Tunnel VPN for Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Do not treat Threat Explorer's latest delivery location as the user's current folder
About Threat Explorer and Real-time detections in Microsoft Defender for Office 365 - Microsoft Defender for Office 365 | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not use a selector label to narrow a WAF EqualsAny exclusion
WAF Exclusion Lists in Azure Application Gateway | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not use Azure Firewall connection logs as Azure Files operation records
Secure traffic destined to private endpoints in Azure Virtual WAN | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not use blob tag search as a complete inventory of previous versions
Manage and find Azure Blob data with blob index tags | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not use editable blob scan tags as the sole release control
Introduction to Defender for Storage malware scanning - Microsoft Defender for Cloud | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not use missing Virtual WAN propagation as proof of network isolation
Static routes in Azure Virtual WAN - Azure Virtual WAN | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingInformation
Do not use performance-anomaly email silence as a real-time health check
Smart detection - performance anomalies - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not use policy removal as rollback for Android Management API migration
Android Management API for personally owned work profiles - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Do not use startup scores to certify first-sign-in provisioning
Startup Performance Report in Endpoint Analytics - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Document tenant and subnet identifiers in an HNVv2 overlay network
Hyper-V Network Virtualization Technical Details in Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Document what a Remote Help session report cannot prove
Troubleshoot and monitor Remote Help for Microsoft Intune. - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistAdvisory
Enable AD Recycle Bin before relying on object-level recovery
Enable Active Directory Recycle Bin in Windows Server
Published June 6, 2025 · DSE reviewed August 26, 2026
GuideAdvisory
Enable and attest System Guard Secure Launch on supported processors
System Guard Secure Launch and SMM protection
Published August 15, 2025 · DSE reviewed August 26, 2026
ChecklistAdvisory
Enable BitLocker with Intune only after recovery is proven
Microsoft Learn: Encrypt Windows devices with BitLocker using Intune
Published April 15, 2026 · DSE reviewed July 19, 2026
GuideAdvisory
Enable command-line detail in native process-creation auditing
Command line process auditing
Published May 12, 2025 · DSE reviewed August 26, 2026
PlaybookAdvisory
Enable Credential Guard only after testing authentication dependencies
Microsoft Learn: Considerations and known issues when using Credential Guard
Publication date not specified · DSE reviewed August 17, 2026
GuideImportant
Enable Key Vault purge protection only after choosing a recoverability window
Azure Key Vault recovery overview
Publication date not specified · DSE reviewed August 25, 2026
BriefingAdvisory
Enable-ADOptionalFeature: enable adoptional feature under AD/DNS change control
Enable-ADOptionalFeature
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Enable-DnsServerPolicy: enable dns server policy with rollback checks
Enable-DnsServerPolicy
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
End active disk-restore-point access before an approved restore-point deletion
Troubleshoot restore point failures - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Enrich existing ContainerLog records without dropping rows that lack inventory matches
Troubleshoot collection of container logs in Azure Monitor - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Evaluate a Spot Priority Mix change during scaling, not immediately after saving
Get high availability and cost savings with Spot Priority Mix for Virtual Machine Scale Sets - Azure Virtual Machine Scale Sets | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Evaluate CSV memory caching against the workload’s read and write balance
Use the CSV in-memory read cache with Azure Local and Windows Server clusters
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Evaluate nested resiliency for a two-node storage cluster
Nested resiliency for Storage Spaces Direct
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Evaluate Network HUD preview as intent-aware network diagnostics
What is Network HUD (preview) for Windows Server?
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Evaluate RPC anonymous-client restrictions against application dependencies
RPC Interface Restriction for Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Evaluate the profile dependency before choosing EPM current-user elevation
Plan and Prepare for Endpoint Privilege Management Deployment - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Exclude selected redirected folders from automatic offline caching
Disable Offline Files on individual redirected folders
Publication date not specified · DSE reviewed September 8, 2026
BriefingAdvisory
Exempt Defender for Identity sensor traffic from SSL interception
Connect to the Defender for Identity service
Published July 2, 2026 · DSE reviewed August 26, 2026
PlaybookImportant
Exercise Azure Backup soft-delete recovery before the retention clock expires
Secure by default with soft delete for Azure Backup
Publication date not specified · DSE reviewed August 25, 2026
GuideInformation
Expand guest-cluster S2D storage without resizing its existing disks
Using Storage Spaces Direct in a virtual machine
Publication date not specified · DSE reviewed September 8, 2026
ExplainerInformation
Expect batch-local totals from Azure Monitor pipeline aggregation
Configure Azure Monitor pipeline transformations - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Expect Ntdsutil to attempt FSMO transfer before completing a seizure
AD Forest Recovery - Seizing an Operations Master Role
Published May 12, 2025 · DSE reviewed August 26, 2026
ExplainerInformation
Explain an autoscale scale-in decision from all active rules
Understand autoscale settings in Azure Monitor - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Explain OS-only agentless findings before counting Azure data disks as covered
Enable agentless machine scanning - Microsoft Defender for Cloud | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Export an Elastic SAN snapshot before deleting its source volume
Backup Azure Elastic SAN volumes | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Export-DnsServerDnsSecPublicKey: export dns server dns sec public key with before-and-after evidence
Export-DnsServerDnsSecPublicKey
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Export-DnsServerZone: export dns server zone with rollback checks
Export-DnsServerZone
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Extend identity threat investigations to SailPoint-managed accounts
How Microsoft Defender for Identity protects your SailPoint Identity Security Cloud accounts (Preview)
Published March 4, 2026 · DSE reviewed August 26, 2026
BriefingAdvisory
Extend the AD schema and delegate rights before LAPS rollout
Get started with Windows LAPS and Windows Server Active Directory
Published April 11, 2025 · DSE reviewed August 26, 2026
PlaybookAdvisory
Filter Windows DNS queries only with explicit match and timeout tests
Use DNS Policy for Applying Filters on DNS Queries
Published July 29, 2021 · DSE reviewed August 26, 2026
GuideInformation
Find table overrides before changing Log Analytics workspace retention
Manage Data Retention in a Log Analytics Workspace - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Find the resource-disk configuration owner before editing waagent on Ubuntu
Azure Linux VM Agent Overview - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookImportant
Find unsigned LDAP binds before requiring signing
How to enable LDAP signing in Windows Server
Publication date not specified · DSE reviewed August 25, 2026
ChecklistImportant
Finish authentication-method policy migration without opening a sign-in gap
How to migrate to the Authentication methods policy
Publication date not specified · DSE reviewed August 25, 2026
GuideInformation
Finish Azure Table queries by following continuation tokens
Azure storage table design patterns | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Finish Defender for Identity sensor settings before judging telemetry coverage
Configure Microsoft Defender for Identity sensor settings
Published July 2, 2026 · DSE reviewed August 26, 2026
GuideInformation
Finish Samsung E-FOTA device registration before treating the connector as ready
Integrate Samsung Knox E-FOTA with Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookImportant
Finish the Windows Secure Boot trust-chain transition from 2011 certificates
Microsoft Learn: Update Secure Boot Certificates for Windows Devices
Published May 1, 2026 · DSE reviewed August 11, 2026
GuideInformation
Fit scale-set shutdown work inside the already-issued termination deadline
Terminate notification for Azure Virtual Machine Scale Set instances - Azure Virtual Machine Scale Sets | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Fix the Site Recovery appliance's address choice before registration
Support matrix for VMware/physical disaster recovery in Azure Site Recovery. - Azure Site Recovery | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Follow the NPS dependencies after an address or name change
Verify Configuration After NPS Changes
Publication date not specified · DSE reviewed September 8, 2026
BriefingAdvisory
Forward Windows events to standalone identity sensors for added detection context
Configure Windows event forwarding to your Defender for Identity standalone sensor
Published July 2, 2026 · DSE reviewed August 26, 2026
GuideInformation
Freeze rolling-upgrade phase and skip decisions before the upgrade starts
Custom metrics for rolling upgrades on Virtual Machine Scale Sets - Azure Virtual Machine Scale Sets | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Generate confidential-container enforcement policy through the supported tooling
Confidential containers on Azure Container Instances - Azure Container Instances | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingAdvisory
Geo-steer Windows DNS only after validating client-subnet classification
Use DNS Policy for Application Load Balancing With Geo-Location Awareness
Published July 29, 2021 · DSE reviewed August 26, 2026
PlaybookAdvisory
Get-ADAccountAuthorizationGroup: inventory adaccount authorization group with bounded evidence
Get-ADAccountAuthorizationGroup
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Get-ADAccountResultantPasswordReplicationPolicy: inventory adaccount resultant password replication policy
Get-ADAccountResultantPasswordReplicationPolicy
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Get-ADAuthenticationPolicySilo: inventory adauthentication policy silo against recorded identity and DNS state
Get-ADAuthenticationPolicySilo
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Get-ADCentralAccessPolicy: inventory adcentral access policy with bounded evidence
Get-ADCentralAccessPolicy
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Get-ADCentralAccessRule: inventory adcentral access rule with before-and-after evidence
Get-ADCentralAccessRule
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Get-ADComputer: inventory adcomputer with rollback checks
Get-ADComputer
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Get-ADComputerServiceAccount: inventory adcomputer service account with bounded evidence
Get-ADComputerServiceAccount
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Get-ADDCCloningExcludedApplicationList: inventory addccloning excluded application list against recorded identity and DNS state
Get-ADDCCloningExcludedApplicationList
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Get-ADDefaultDomainPasswordPolicy: inventory addefault domain password policy under AD/DNS change control
Get-ADDefaultDomainPasswordPolicy
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Get-ADDomain: inventory addomain under AD/DNS change control
Get-ADDomain
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Get-ADDomainController: inventory addomain controller with rollback checks
Get-ADDomainController
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Get-ADDomainControllerPasswordReplicationPolicyUsage: inventory addomain controller password replication policy usage
Get-ADDomainControllerPasswordReplicationPolicyUsage
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Get-ADFineGrainedPasswordPolicy: inventory adfine grained password policy with rollback checks
Get-ADFineGrainedPasswordPolicy
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Get-ADForest: inventory adforest with rollback checks
Get-ADForest
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Get-ADGroup: inventory adgroup against recorded identity and DNS state
Get-ADGroup
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Get-ADGroupMember: inventory adgroup member with bounded evidence
Get-ADGroupMember
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Get-ADObject: inventory adobject with bounded evidence
Get-ADObject
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Get-ADOptionalFeature: inventory adoptional feature with before-and-after evidence
Get-ADOptionalFeature
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Get-ADOrganizationalUnit: inventory adorganizational unit with bounded evidence
Get-ADOrganizationalUnit
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Get-ADReplicationAttributeMetadata: inventory adreplication attribute metadata against recorded identity and DNS state
Get-ADReplicationAttributeMetadata
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Get-ADReplicationConnection: inventory adreplication connection against recorded identity and DNS state
Get-ADReplicationConnection
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Get-ADReplicationPartnerMetadata: inventory adreplication partner metadata with before-and-after evidence
Get-ADReplicationPartnerMetadata
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Get-ADReplicationQueueOperation: inventory adreplication queue operation with bounded evidence
Get-ADReplicationQueueOperation
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Get-ADReplicationSiteLinkBridge: inventory adreplication site link bridge with rollback checks
Get-ADReplicationSiteLinkBridge
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Get-ADReplicationSubnet: inventory adreplication subnet with rollback checks
Get-ADReplicationSubnet
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Get-ADReplicationUpToDatenessVectorTable: inventory adreplication up to dateness vector table under AD/DNS change control
Get-ADReplicationUpToDatenessVectorTable
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Get-ADResourcePropertyList: inventory adresource property list against recorded identity and DNS state
Get-ADResourcePropertyList
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Get-ADResourcePropertyValueType: inventory adresource property value type under AD/DNS change control
Get-ADResourcePropertyValueType
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Get-ADTrust: inventory adtrust under AD/DNS change control
Get-ADTrust
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Get-ADUser: inventory aduser with before-and-after evidence
Get-ADUser
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Get-ADUserResultantPasswordPolicy: inventory aduser resultant password policy with bounded evidence
Get-ADUserResultantPasswordPolicy
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Get-DnsServer: inventory dns server with bounded evidence
Get-DnsServer
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Get-DnsServerClientSubnet: inventory dns server client subnet under AD/DNS change control
Get-DnsServerClientSubnet
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Get-DnsServerDiagnostics: inventory dns server diagnostics with bounded evidence
Get-DnsServerDiagnostics
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Get-DnsServerEncryptionProtocol: inventory dns server encryption protocol under AD/DNS change control
Get-DnsServerEncryptionProtocol
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Get-DnsServerGlobalNameZone: inventory dns server global name zone against recorded identity and DNS state
Get-DnsServerGlobalNameZone
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Get-DnsServerGlobalQueryBlockList: inventory dns server global query block list under AD/DNS change control
Get-DnsServerGlobalQueryBlockList
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Get-DnsServerRecursionScope: inventory dns server recursion scope with rollback checks
Get-DnsServerRecursionScope
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Get-DnsServerResourceRecord: inventory dns server resource record with before-and-after evidence
Get-DnsServerResourceRecord
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Get-DnsServerResponseRateLimiting: inventory dns server response rate limiting against recorded identity and DNS state
Get-DnsServerResponseRateLimiting
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Get-DnsServerScavenging: inventory dns server scavenging under AD/DNS change control
Get-DnsServerScavenging
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Get-DnsServerStatistics: inventory dns server statistics under AD/DNS change control
Get-DnsServerStatistics
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Get-DnsServerTrustAnchor: inventory dns server trust anchor with bounded evidence
Get-DnsServerTrustAnchor
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Get-DnsServerTrustPoint: inventory dns server trust point with rollback checks
Get-DnsServerTrustPoint
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Get-DnsServerVirtualizationInstance: inventory dns server virtualization instance against recorded identity and DNS state
Get-DnsServerVirtualizationInstance
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Get-DnsServerZone: inventory dns server zone with before-and-after evidence
Get-DnsServerZone
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Get-DnsServerZoneDelegation: inventory dns server zone delegation under AD/DNS change control
Get-DnsServerZoneDelegation
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Give deployment-stack what-if result resources an explicit retention owner
Preview deployment stack changes with what-if - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Give each query-based health signal one deliberate numeric result
Configure signals in an Azure Monitor health model (preview) - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Give each SDN appliance adapter an explicit management or traffic role
Use network virtual appliances on a virtual network
Publication date not specified · DSE reviewed September 8, 2026
ChecklistAdvisory
Give every Azure Policy exemption an owner, scope, expiry, and review
Microsoft Learn: Azure Policy exemption structure
Published August 4, 2026 · DSE reviewed August 11, 2026
GuideInformation
Give every eligible Intune PKCS connector access to all configured CAs
Overview of Certificate Connector for Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistImportant
Give every Exchange Online connector a route owner, test, and retirement date
Microsoft Learn: Configure mail flow using connectors in Exchange Online
Published May 29, 2024 · DSE reviewed August 11, 2026
GuideImportant
Give every non-human Microsoft Entra identity an owner and an end date
Microsoft: Governing Microsoft Entra service accounts
Published February 16, 2024 · DSE reviewed August 4, 2026
ChecklistAdvisory
Give every shared mailbox an owner, sign-in boundary, and review cadence
Microsoft Learn: About shared mailboxes in Microsoft 365
Publication date not specified · DSE reviewed August 17, 2026
GuideInformation
Give preview dynamic PromQL alerts a numeric signal instead of a Boolean test
Create a Log Search alert rule with dynamic threshold - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideImportant
Govern every Safe Links exception as a monitored bypass
Set up Safe Links policies in Microsoft Defender for Office 365
Publication date not specified · DSE reviewed August 25, 2026
PlaybookImportant
Govern OAuth application consent before it becomes persistent access
Microsoft Learn: Protect against consent phishing
Published January 8, 2025 · DSE reviewed July 28, 2026
GuideAdvisory
Govern SharePoint version history as recovery capacity with a storage cost
Microsoft Learn: Overview of version history limits for document libraries and OneDrive
Published October 3, 2024 · DSE reviewed August 11, 2026
ChecklistAdvisory
Govern Windows DNS record creation, modification, and deletion as production changes
Manage DNS resource records using DNS server on Windows Server
Published June 15, 2023 · DSE reviewed August 26, 2026
ChecklistImportant
Govern Windows DNS scavenging as a deletion change, not routine cleanup
Microsoft Learn: DNS aging and scavenging
Published March 24, 2025 · DSE reviewed August 11, 2026
GuideInformation
Grant service-catalog definition access separately from managed-resource administration
Create and publish Azure Managed Application in service catalog - Azure Managed Applications | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Grant-ADAuthenticationPolicySiloAccess: grant adauthentication policy silo access with before-and-after evidence
Grant-ADAuthenticationPolicySiloAccess
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Group recurring FSRM reports around one approved collection scope
Schedule a Set of Reports
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Handle entity playbooks that have no incident to update
Create and manage Microsoft Sentinel playbooks | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Harden Active Directory Certificate Services before templates become privilege paths
Microsoft Learn: PKI design considerations using Active Directory Certificate Services
Publication date not specified · DSE reviewed August 17, 2026
GuideInformation
Identify a new disk conclusively before initializing it
Initialize New Disks
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Identify the intended Application Insights resource in preview AMA telemetry
Ingest OTLP Data into Azure Monitor with AMA (Preview) - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Identify the physical GPU before assigning it to a standalone VM
Deploy graphics devices by using Discrete Device Assignment
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Identify the related resource behind an Azure Policy compliance result
Determine causes of non-compliance - Azure Policy | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Identify the updater before blocking a vulnerable application version
Block vulnerable applications with Microsoft Defender Vulnerability Management - Microsoft Defender Vulnerability Management | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Identify the VPN Server application before scoping Conditional Access
Configure Conditional Access for VPN connectivity using Microsoft Entra ID
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Identify VM scale-set NAT Pools before adding every V1 NAT rule to a retirement plan
Migrate from Inbound NAT rules version 1 to version 2 | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Identify whether a Hyper-V backup product uses host VSS or the WMI path
Hyper-V Backup Approaches
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Identify which drive tier supplies the Storage Spaces Direct cache
Understanding the storage pool cache in Azure Local and Windows Server clusters
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Identify who can maintain a managed application's resource group
Overview of Azure Managed Applications - Azure Managed Applications | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Import-DnsServerRootHint: import dns server root hint with bounded evidence
Import-DnsServerRootHint
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Import-DnsServerTrustAnchor: import dns server trust anchor with before-and-after evidence
Import-DnsServerTrustAnchor
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Include bare-metal backups in the forest-recovery evidence set
AD Forest Recovery - Backing up a full server
Published June 21, 2023 · DSE reviewed August 26, 2026
GuideInformation
Include downgrade timing and tooling in a Premium SSD tier-change plan
Performance tiers for Azure managed disks - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Include eligible assignments when retiring an Azure custom role
Azure custom roles - Azure RBAC | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Include File Sync's paired-region destinations in a GRS firewall review
Azure File Sync on-premises firewall and proxy settings | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistInformation
Include image and publisher-tenant identifiers in an RBAC gallery handoff
Share Resources in Azure Compute Gallery - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Include Image Builder's staging resource group in the image trust boundary
Best Practices for Azure VM Image Builder - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Include learning periods and complete attack stories in Defender for Identity tests
Best Practices before Offensive Security Testing for Microsoft Defender for Identity
Published January 26, 2026 · DSE reviewed August 26, 2026
PlaybookAdvisory
Include non-domain and non-Windows devices in Defender for Identity monitoring scope
Microsoft Defender for Identity frequently asked questions
Published June 10, 2024 · DSE reviewed August 26, 2026
GuideInformation
Include other workspace queries in the impact review for one Azure Monitor private-link addition
Use Azure Private Link to connect networks to Azure Monitor - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Include rarely connected clients in each DirectAccess migration ring
Remote Access Always On VPN migration planning
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Include RDS component and template handling in a Site Recovery plan
Create your disaster recovery plan
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Include resynchronization time in S2D per-server capacity planning
Choose drives for Azure Local and Windows Server clusters
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Include SharePoint recataloging in a long-term MABS recovery plan
Back up a SharePoint farm to Azure with MABS - Azure Backup | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistInformation
Include temporary ACI resources in an isolated Image Builder readiness review
Isolated Image Builds for Azure VM Image Builder - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Include the Arm64 CHPE change in a Windows hotpatch readiness review
Use Hotpatch With Windows Quality Updates - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Include the attestation endpoint in Trusted Launch integrity-monitoring checks
Boot integrity monitoring overview - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Include the container bridge in Microsoft Tunnel address-conflict checks
Prerequisites the Microsoft Tunnel VPN for Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Include the resource group's region in an Azure change-availability plan
Best practices for templates - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Include user sign-out in the maintenance plan for shared iPads
Admin checklist for iOS/iPadOS software updates in Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Inspect Bicep what-if diagnostics before treating an omitted resource as unchanged
Bicep What-If: Preview Changes Before Deployment - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Inspect custom Apple payloads before relying on Intune conflict reporting
Questions with policies and profiles in Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Inspect empty AppLocker collections before enabling Intune managed installer
Manage approved apps for Windows devices with App Control for Business policy and Managed Installers in Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Inspect every evaluated security-rule layer before opening Bastion access
Check Security Rules Using NSG Diagnostics - Azure Network Watcher | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Inspect exported EAP profiles before distributing authentication settings
Configure EAP Profiles and Settings in Windows
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Inspect hidden default alert filters before explaining a missing Defender policy match
Alert policies in the Microsoft Defender portal - Microsoft Defender XDR | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Inspect inherited DFS visibility permissions before relying on access-based enumeration
Using Inherited Permissions with Access-based Enumeration
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Inspect PowerShell module-path changes when Windows Admin Center setup will not load
Windows Admin Center common troubleshooting steps
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Inspect rsyslog input rulesets when only some sources reach Azure Monitor Agent
Troubleshoot the Azure Monitor agent on Linux virtual machines and scale sets - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Inspect telemetry offline storage under the application's actual user context
Configuring OpenTelemetry in Application Insights - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Inspect the individual connector behind an Intune health summary
About the Microsoft Intune tenant status page - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Inspect the provider error before treating every Azure HTTP 429 as quota exhaustion
Understand how Azure Resource Manager throttles requests - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Install the DHCP relay role on the intended remote subnet
Install DHCP relay agent for Windows Server
Publication date not specified · DSE reviewed September 8, 2026
ExplainerAdvisory
Install-ADServiceAccount: install adservice account against recorded identity and DNS state
Install-ADServiceAccount
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Interpret CPU and RAM spike percentages before resizing endpoints
Resource Performance Report - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerAdvisory
Interpret Defender for Identity detections as correlated behavioral signals
Microsoft Defender for Identity overview
Published July 23, 2026 · DSE reviewed August 26, 2026
GuideInformation
Interpret Hyper-V extended ACL direction from the VM perspective
Create Security Policies with Extended Port Access Control Lists
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Interpret NVIDIA extension driverVersion according to the VM family
NVIDIA GPU Driver Extension - Azure Linux VMs - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Interpret RDS User Input Delay as the slowest queued input in the interval
Use performance counters to diagnose application responsiveness problems on Remote Desktop session hosts
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Interpret Remote Access historical reports as sessions
Generate a usage report for remote clients using historical data
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Interpret S2D drive history at the device measurement boundary
Performance history for drives
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Interpret Service Fabric replication-queue warnings by replica role
Troubleshoot with system health reports - Azure Service Fabric | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Interpret the 100 marker for new metrics in usage-change reports
Metrics usage insights in Azure Monitor (Preview) - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Interpret vulnerability exceptions without reporting excluded exposure as repaired
Create, view, and manage exceptions in Microsoft Defender Vulnerability Management - Microsoft Defender Vulnerability Management | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Intersect managed-application region choices with resource-type support
CreateUiDefinition.json file for portal pane - Azure Managed Applications | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingAdvisory
Invalidate a domain controller's RID pool and verify the renewal behavior
AD Forest Recovery - Invalidating the RID Pool
Published May 12, 2025 · DSE reviewed August 26, 2026
ChecklistAdvisory
Inventory default domain-controller accounts before changing them
Active Directory Accounts
Published June 30, 2025 · DSE reviewed August 26, 2026
ChecklistInformation
Inventory detector coverage before the Application Insights smart-detection migration preview
Upgrade Azure Monitor Application Insights smart detection to alerts (preview) - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistInformation
Inventory every autoscale webhook instead of trusting the first portal entry
Use autoscale to send email and webhook alert notifications - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Inventory every MSI Office product before enabling Remove MSI
Add Microsoft 365 Apps to Windows Devices Using Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Inventory every storage destination before associating a service endpoint policy
Create and associate service endpoint policies | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Inventory service accounts with their recent authentication context
Investigate and protect Service Accounts
Published March 25, 2025 · DSE reviewed August 26, 2026
GuideInformation
Inventory trusted RDP publishers before restricting which files can open
RDP file security in Group Policy on Windows and Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Investigate a Defender software-version mismatch before calling it an inventory error
Software inventory - Microsoft Defender Vulnerability Management | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerAdvisory
Investigate Active Directory accounts with no logon in 90 days
Accounts security posture assessments
Published August 18, 2026 · DSE reviewed August 26, 2026
GuideInformation
Investigate an NCSI connectivity indicator using the network transition that triggered it
Network Connectivity Status Indicator FAQ for Windows
Publication date not specified · DSE reviewed September 8, 2026
PlaybookImportant
Investigate and remediate risky Microsoft Entra users with evidence
Microsoft Learn: Remediate risks and unblock users
Published May 27, 2026 · DSE reviewed July 19, 2026
GuideInformation
Investigate detached Storage Spaces Direct volumes beyond physical-disk health
Storage Spaces Direct troubleshooting
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Investigate OWA PDF preview failures without removing the download block
Troubleshooting access and session controls for end-users - Microsoft Defender for Cloud Apps | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Investigate partial state after a failed Blob immutability migration
Configure immutability policies for blob versions - Azure Storage | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookImportant
Investigate risky workload identities separately from risky users
Securing workload identities
Publication date not specified · DSE reviewed August 25, 2026
BriefingAdvisory
Investigate SPN and UPN collisions from directory-service events
SPN and UPN uniqueness
Published May 12, 2025 · DSE reviewed August 26, 2026
PlaybookAdvisory
Invoke-DnsServerZoneSign: invoke dns server zone sign with bounded evidence
Invoke-DnsServerZoneSign
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Invoke-DnsServerZoneUnsign: invoke dns server zone unsign with rollback checks
Invoke-DnsServerZoneUnsign
Publication date not specified · DSE reviewed August 27, 2026
PlaybookImportant
Issue Microsoft Entra Temporary Access Passes as controlled bootstrap credentials
Configure Temporary Access Pass to register passwordless authentication methods
Publication date not specified · DSE reviewed August 25, 2026
BriefingImportant
July 2026 Windows security update: deployment checks for managed environments
Microsoft Windows message center
Publication date not specified · DSE reviewed July 19, 2026
GuideInformation
Keep a Prometheus rule group's cluster scope aligned with its scraped label
Rule Groups in Azure Monitor Managed Service for Prometheus - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep a tenant deployment name paired with its original deployment location
Deploy resources to tenant - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep a Virtual WAN BGP peer out of dynamic NAT mappings
Configure VPN NAT rules for your gateway - Azure Virtual WAN | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Keep agentless inventory separate from software first-seen chronology
Cloud asset inventory - Microsoft Defender for Cloud | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep all calls in an Intune SCEP request on the same NDES server
Use SCEP certificate profiles with Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep an Azure Table atomic update set inside one partition
Design Azure Table storage for data modification | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep Android non-APK scanning expectations inside the managed profile
Configure Microsoft Defender for Endpoint on Android - Microsoft Defender for Endpoint | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep ASIM parser normalization separate from event correlation
Develop Microsoft Sentinel Advanced Security Information Model (ASIM) parsers | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistImportant
Keep Azure Connected Machine agents inside their one-year support window
Microsoft Learn: Manage Azure Connected Machine agent versions
Published April 28, 2026 · DSE reviewed August 11, 2026
GuideInformation
Keep Azure public addresses out of guest IP configuration
Configure IP addresses for an Azure network interface | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep Bastion's target selector aligned with the required sign-in method
Connect to a VM using Bastion - Windows native client - Azure Bastion | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep blob soft delete enabled after activating built-in malware remediation
Set Up Automated Remediation for Malware Detection - Microsoft Defender for Cloud | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep both GatewaySubnet prefixes after an ExpressRoute gateway migration uses them
About migrating to an availability zone-enabled ExpressRoute virtual network gateway - Azure ExpressRoute | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Keep Defender for Identity email and Syslog notifications on sensor v2 dependencies
Defender for Identity notifications in Microsoft Defender
Published July 2, 2026 · DSE reviewed August 26, 2026
ExplainerAdvisory
Keep Defender for Identity sensor v2 scope to legacy controllers and non-DC identity roles
Microsoft Defender for Identity sensor v2.x prerequisites
Published June 8, 2026 · DSE reviewed August 26, 2026
GuideInformation
Keep disconnected Azure Monitor pipeline replicas while their local buffers need backfill
Configure Azure Monitor pipeline with CLI or ARM templates - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingInformation
Keep DLP-enabled Windows clients away from SAP application shares
Microsoft Defender Endpoint on Windows Server with SAP - Microsoft Defender for Endpoint | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep each RDS session collection at a consistent Windows Server version
Supported Configurations for Remote Desktop Services
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Keep GPU resource-pool names consistent across clustered DDA hosts
Use GPUs with Discrete Device Assignment in clustered VMs on Windows Server and Azure Local
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Keep Grafana log queries responsive to dashboard zoom with time macros
Use Azure Managed Grafana - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistInformation
Keep host maintenance deferral inside its supported resource and time limits
Overview of Maintenance Configurations for Azure virtual machines - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep individual NVA BGP peers when advertising a shared load-balancer next hop
Next hop IP support in Azure Route Server | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep Linux guest adapter identity stable during cluster failover
Best Practices for running Linux on Hyper-V
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Keep managed Service Fabric NSG overrides inside the supported priority band
Configure network settings for Service Fabric managed clusters - Azure Service Fabric | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep MSP key-reset counters increasing across recovery automation
Troubleshoot MSP - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideImportant
Keep MSP operator identities and customer administration out of the corporate collaboration tenant
Microsoft Learn: Security best practices for Cloud Solution Provider partners
Publication date not specified · DSE reviewed August 17, 2026
GuideInformation
Keep pipeline client certificates inside the managed CA rotation window
Azure Monitor pipeline TLS configuration (Automated certificate management) - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideImportant
Keep privileged administration off ordinary workstations
Microsoft Learn: Privileged access
Published May 31, 2026 · DSE reviewed August 11, 2026
ChecklistAdvisory
Keep protected machine accounts disabled until Microsoft resolves rotation
Credential Guard protected machine accounts in Windows Server 2025
Published April 11, 2025 · DSE reviewed August 26, 2026
GuideAdvisory
Keep RDP credentials off the target with Remote Credential Guard
Remote Credential Guard
Published March 29, 2026 · DSE reviewed August 26, 2026
GuideInformation
Keep regional backup history separate from a moved Azure workload
How to move Azure Backup Recovery Services vaults - Azure Backup | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep remote Bicep parameter delivery inside Azure PowerShell's supported formats
Deploy Bicep files with Azure PowerShell - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep roaming-profile storage separate from redirected-folder shares
Deploy roaming user profiles
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Keep runtime resource lookups out of ARM parameter defaults
Parameters in templates - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep SAS issuance records outside Azure Storage's token inventory
Grant limited access to data with shared access signatures (SAS) - Azure Storage | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep Service Fabric health output filters separate from evaluation policy
How to view Azure Service Fabric entities' aggregated health - Azure Service Fabric | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep SMB over QUIC device admission separate from user authentication
Configure SMB over QUIC client access control in Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideAdvisory
Keep the custom banned-password list small, local, and testable
Configure custom Microsoft Entra password protection lists
Publication date not specified · DSE reviewed August 25, 2026
GuideInformation
Keep the MABS SQL instance local when planning an Azure Stack Hub installation
Install Azure Backup Server on Azure Stack Hub - Azure Backup | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep the macOS Remote Help screen-sharing consent step explicit
Deploy Remote Help with Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep the prior Recovery Services encryption key available through rotation
Encrypt backup data by using customer-managed keys - Azure Backup | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistImportant
Keep two emergency Microsoft Entra accounts ready before the tenant needs them
Microsoft Learn: Manage emergency access accounts in Microsoft Entra ID
Published June 5, 2026 · DSE reviewed July 19, 2026
GuideInformation
Keep UDF support when cloud-init provisioning needs passwords or custom data
Overview of cloud-init support for Linux VMs in Azure - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep VM availability state separate from the annotation explaining it
Virtual Machine (VM) availability information in Azure Resource Graph - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Keep VM configuration upgrades separate from Hyper-V host upgrades
Upgrade virtual machine version in Hyper-V on Windows or Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Keep VM watch process CPU percentages tied to their denominator
Azure VM Watch - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistAdvisory
Keep VPN identity enrichment on sensor v2 and validate RADIUS accounting data
Defender for Identity VPN integration in Microsoft Defender
Published August 7, 2026 · DSE reviewed August 26, 2026
GuideInformation
Keep Windows Custom Script work inside its execution and restart boundaries
Azure Custom Script Extension for Windows - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerAdvisory
Keep Windows geo-DNS policy data consistent across primary and secondary servers
Use DNS Policy for Geo-Location Based Traffic Management with Primary-Secondary Deployments
Published July 29, 2021 · DSE reviewed August 26, 2026
PlaybookAdvisory
Key Defender for Identity SIEM automation to externalId values
Microsoft Defender for Identity SIEM log reference
Published September 22, 2024 · DSE reviewed August 26, 2026
ExplainerImportant
Label collaboration containers without assuming the files inherit the label
Use sensitivity labels to protect collaborative workspaces (groups and sites)
Publication date not specified · DSE reviewed August 25, 2026
GuideInformation
Label the comparison baseline before interpreting endpoint scores
Scores, Baselines, and Insights in Endpoint Analytics - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Land new Azure subscriptions in an explicit default management group
Protect your resource hierarchy - Azure Governance - Azure governance | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Leave address-reuse headroom in an ACI subnet
Deploy container group to Azure virtual network - Azure Container Instances | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Leave time for NetApp Files to discover replacement domain controllers
Understand guidelines for Active Directory Domain Services site design and planning | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Limit device redirection when using Hyper-V Enhanced Session Mode
Share devices with Hyper-V Windows virtual machines
Publication date not specified · DSE reviewed September 8, 2026
GuideAdvisory
Limit Zero Trust DNS pilots to licensed Windows 11 Enterprise or Education devices
Zero Trust DNS
Published October 30, 2025 · DSE reviewed August 26, 2026
GuideAdvisory
Link fragmented user accounts only with evidence of common identity
Manage related identities and accounts in Microsoft Defender for Identity
Published July 23, 2026 · DSE reviewed August 26, 2026
ChecklistInformation
List excluded data before approving an Azure VM restore-point plan
Support matrix for VM restore points - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Locate a custom policy definition where its intended subscriptions can use it
Details of Azure Policy definition structure basics - Azure Policy | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Locate the failed layer in a drive firmware-update attempt
Troubleshooting drive firmware updates
Publication date not specified · DSE reviewed September 8, 2026
BriefingAdvisory
Log Windows Firewall drops and successes to separate paths
Configure Windows Firewall logging
Published April 7, 2025 · DSE reviewed August 26, 2026
GuideInformation
Look in Activity Log when SKU validation leaves no deployment history
SKU not available errors - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Make a workbook ARM action visibly different from a navigation link
Azure Workbooks link actions - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingInformation
Make a workbook stat card's first-row behavior explicit
Azure Workbooks stat visualizations - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Make Event Hubs relocation fail when the target service endpoint is missing
Relocate Azure Event Hubs to another region - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Make Intune macOS shell scripts safe for parallel and repeated execution
Use Shell Scripts on macOS Devices in Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Make Intune report export columns and localization explicit
Use Graph APIs to Export Intune Reports - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookImportant
Make Microsoft Entra Connect replaceable before synchronization stops
Microsoft Entra Connect: Staging server and disaster recovery
Published April 2, 2026 · DSE reviewed August 4, 2026
GuideInformation
Make React Native device-ID promises settle before trusting telemetry startup
Enable a framework extension for Application Insights JavaScript SDK - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Make the Bicep executable explicit in an MSBuild pipeline
Quickstart: Use MSBuild tasks to convert Bicep files and parameters to JSON - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Make Update Manager pre-check failure trigger an explicit cancellation decision
Manage the pre and post maintenance configuration events in Azure Update Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistAdvisory
Manage Defender for Identity sensor status, health, updates, and proxy settings together
Manage and update Microsoft Defender for Identity sensors
Published July 15, 2026 · DSE reviewed August 26, 2026
ExplainerAdvisory
Manage the seven-day identity alert queue with explicit filters and classifications
View and manage security alerts
Published July 2, 2026 · DSE reviewed August 26, 2026
GuideInformation
Map a tenant virtual gateway to its routing subnet and gateway pool
Add a Virtual Gateway to a Tenant Virtual Network
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Map both identities in the managed-application storage encryption recipe
Create Azure Managed Application that deploys storage account encrypted with customer-managed key - Azure Managed Applications | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Map cluster fault domains to the actual rack and site layout
Fault domain awareness
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Map container endpoint addresses onto an SDN tenant subnet
Connect container endpoints to a tenant virtual network
Publication date not specified · DSE reviewed September 8, 2026
ChecklistAdvisory
Map Defender-format identity alert names by stable alert ID
Microsoft Defender for Identity alerts in Microsoft Defender format
Published July 1, 2026 · DSE reviewed August 26, 2026
GuideInformation
Map dotted attribute names literally in a pipeline log exporter
Troubleshoot Azure Monitor pipeline - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Map every restored disk before rebuilding a VM from its restore point
Manage Virtual Machine restore points - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Map hunting-result identifiers before using the preview graph view
Work with advanced hunting query results in Microsoft Defender - Microsoft Defender XDR | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerAdvisory
Map native Windows LAPS cmdlets before replacing legacy scripts
Windows LAPS PowerShell Cmdlets Overview
Published May 6, 2025 · DSE reviewed August 26, 2026
GuideInformation
Map the layers behind a Storage Spaces Direct pool
Storage Spaces Direct overview
Publication date not specified · DSE reviewed September 8, 2026
BriefingAdvisory
Map what AD DS stores before delegating directory access
Active Directory Domain Services overview
Published March 10, 2025 · DSE reviewed August 26, 2026
GuideAdvisory
Map Windows DNS resolution from namespace to authoritative zone
DNS Architecture in Windows Server
Published March 24, 2025 · DSE reviewed August 26, 2026
GuideInformation
Match Connection Monitor's region to its Azure source machines
Create a Connection Monitor - Azure Portal - Azure Network Watcher | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingInformation
Match exploit-protection scope to executable names and paths, not assumed versions
Exploit protection reference - Microsoft Defender for Endpoint | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Match incremental snapshots to the disk instance, not just its reused name
Create an incremental snapshot - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Match platform-metric export placement to the destination type
Metrics export using data collection rules - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Match Prometheus remote-write authentication to the installed client version
Connect self-managed Prometheus to Azure Monitor managed service for Prometheus - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Match Remote Desktop launch links to the intended client
Remote Desktop URI scheme
Publication date not specified · DSE reviewed September 8, 2026
ChecklistAdvisory
Match required SIEM message syntax before standalone sensor ingestion
Listen for SIEM events on your Defender for Identity standalone sensor
Published July 2, 2026 · DSE reviewed August 26, 2026
GuideInformation
Match the Disk Cleanup procedure to the installed Windows Server release
Using Disk Cleanup on Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Match the guest-cluster floating IP to its SDN VIP and probe
Guest clustering in a virtual network
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Match the MABS database version before rebuilding its server
Back up the MABS server - Azure Backup | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Measure combined workload demand before choosing a constrained-vCPU Azure size
Constrained vCPU sizes - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Measure encrypted Queue Storage messages after their envelope is encoded
Client-side encryption for queues - Azure Storage | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Measure the update fan-out before denormalizing Azure Table relationships
Modeling relationships in Azure Table storage design | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingAdvisory
Measure TPM lockout state before attempting another authorization
Manage TPM lockout
Published August 15, 2025 · DSE reviewed August 26, 2026
GuideImportant
Measure Windows Event Forwarding health—not just collector uptime
Use Windows Event Forwarding to help with intrusion detection
Publication date not specified · DSE reviewed August 25, 2026
GuideAdvisory
Microsoft 365 Copilot permissions readiness: fix oversharing before rollout
Microsoft Learn: Microsoft 365 Copilot data and compliance readiness
Publication date not specified · DSE reviewed July 19, 2026
ChecklistAdvisory
Microsoft 365 offboarding: secure access and preserve business records in the right order
Microsoft Learn: Remove a former employee and secure data
Publication date not specified · DSE reviewed July 19, 2026
ExplainerInformation
Microsoft Defender for Business: understand the protection and the boundaries
Microsoft Learn: What is Microsoft Defender for Business?
Publication date not specified · DSE reviewed July 19, 2026
PlaybookAdvisory
Microsoft Entra Conditional Access: plan controls without locking out the tenant
Microsoft Learn: Plan a Conditional Access deployment
Publication date not specified · DSE reviewed July 19, 2026
BriefingImportant
Microsoft Entra Retires Native SMS and Voice MFA in 2027—Prepare for Passkeys Now
Microsoft Learn: Passkeys by default and retirement of Microsoft-provided SMS and voice authentication
Published August 10, 2026 · DSE reviewed August 11, 2026
ExplainerAdvisory
Microsoft Intune compliance: design the signal before enforcing access
Microsoft Learn: Device compliance policies in Microsoft Intune
Publication date not specified · DSE reviewed July 19, 2026
ChecklistAdvisory
Microsoft Teams Phone readiness: validate licensing, network, calling, and emergency workflows
Microsoft Learn: Set up Teams Phone in your organization
Publication date not specified · DSE reviewed July 19, 2026
PlaybookAdvisory
Migrate eligible services to device-bound dMSA identities
Delegated Managed Service Accounts overview in Windows Server 2025
Published May 30, 2025 · DSE reviewed August 26, 2026
ChecklistAdvisory
Migrate legacy LAPS with bounded side-by-side coexistence
Prepare for Windows Local Administrator Password Solution (LAPS) Deployment and Migration
Published May 16, 2025 · DSE reviewed August 26, 2026
GuideInformation
Migrate Prometheus rule delivery separately from scrape configuration
Migrate from Self-Hosted Prometheus to Azure Monitor Managed Service for Prometheus - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Migrate sensor v2 only after checking sensor v3 feature limits
Migrate from Defender for Identity sensor v2 to sensor v3.x
Published July 15, 2026 · DSE reviewed August 26, 2026
PlaybookAdvisory
Mirror every monitored domain controller to a standalone identity sensor
Configure port mirroring
Published June 15, 2026 · DSE reviewed August 26, 2026
ExplainerAdvisory
Mirror trusted and disallowed CTLs for disconnected Windows systems
Configure trusted roots and disallowed certificates in Windows
Published May 15, 2025 · DSE reviewed August 26, 2026
ExplainerAdvisory
Model AD replication objects before changing site topology
Active Directory Replication Concepts
Published May 12, 2025 · DSE reviewed August 26, 2026
PlaybookAdvisory
Model every Active Directory forest in one Defender for Identity monitoring plan
Microsoft Defender for Identity multi-forest considerations
Published August 10, 2023 · DSE reviewed August 26, 2026
GuideInformation
Model VM Application dependencies with order and failure behavior together
Overview of Azure VM Applications in the Azure Compute Gallery - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerAdvisory
Monitor LDAP cookie-pool pressure from large result sets
How LDAP server cookies are handled
Published May 12, 2025 · DSE reviewed August 26, 2026
GuideInformation
Monitor persistent memory beyond ordinary disk charts
Persistent memory health management for Storage Spaces Direct in Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideAdvisory
Monitor the dedicated Windows LAPS operational log
Use Windows LAPS event logs
Published May 12, 2025 · DSE reviewed August 26, 2026
GuideInformation
Move an identified cluster disk from Available Storage into CSV
Manage Cluster Shared Volumes
Publication date not specified · DSE reviewed September 8, 2026
PlaybookAdvisory
Move Defender ASR rules from audit to block through controlled rings
Microsoft Learn: Plan your attack surface reduction rules deployment
Published May 22, 2026 · DSE reviewed July 19, 2026
ExplainerAdvisory
Move Defender for Identity access to least-privileged unified RBAC roles
Microsoft Defender for Identity role groups
Published January 15, 2024 · DSE reviewed August 26, 2026
PlaybookAdvisory
Move Windows known folders to OneDrive without creating an empty desktop
Microsoft Learn: Redirect and move Windows known folders to OneDrive
Published March 27, 2025 · DSE reviewed July 19, 2026
PlaybookAdvisory
Move Windows services from reusable passwords to managed service identities where supported
Microsoft Learn: Manage group Managed Service Accounts
Publication date not specified · DSE reviewed August 17, 2026
PlaybookAdvisory
Move-ADDirectoryServer: move addirectory server with bounded evidence
Move-ADDirectoryServer
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Move-ADDirectoryServerOperationMasterRole: move addirectory server operation master role with before-and-after evidence
Move-ADDirectoryServerOperationMasterRole
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Name the device cohort before sharing endpoint analytics results
Device Scopes - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
New-ADAuthenticationPolicy: create adauthentication policy with bounded evidence
New-ADAuthenticationPolicy
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
New-ADCentralAccessRule: create adcentral access rule with rollback checks
New-ADCentralAccessRule
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
New-ADClaimTransformPolicy: create adclaim transform policy with rollback checks
New-ADClaimTransformPolicy
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
New-ADClaimType: create adclaim type with rollback checks
New-ADClaimType
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
New-ADComputer: create adcomputer with bounded evidence
New-ADComputer
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
New-ADDCCloneConfigFile: create addcclone config file with before-and-after evidence
New-ADDCCloneConfigFile
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
New-ADGroup: create adgroup with rollback checks
New-ADGroup
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
New-ADObject: create adobject under AD/DNS change control
New-ADObject
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
New-ADOrganizationalUnit: create adorganizational unit against recorded identity and DNS state
New-ADOrganizationalUnit
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
New-ADReplicationSite: create adreplication site under AD/DNS change control
New-ADReplicationSite
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
New-ADReplicationSiteLink: create adreplication site link with before-and-after evidence
New-ADReplicationSiteLink
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
New-ADResourceProperty: create adresource property under AD/DNS change control
New-ADResourceProperty
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
New-ADServiceAccount: create adservice account under AD/DNS change control
New-ADServiceAccount
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
New-ADUser: create aduser against recorded identity and DNS state
New-ADUser
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Normalize country names and codes before aggregating a workbook map
Azure Workbooks map visualizations - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingAdvisory
Operate Windows certificate trust lists in disconnected networks
Certificates and Trust Management in Windows
Published May 21, 2025 · DSE reviewed August 26, 2026
PlaybookAdvisory
Operate Windows Server 2025 Hotpatch without pretending reboots disappeared
Microsoft Learn: Hotpatch for Windows Server
Published July 14, 2025 · DSE reviewed August 11, 2026
ChecklistInformation
Package Linux application dependencies for the VM's actual repository access
Create packages and scripts for VM applications - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Package project access with approval, expiry, and delegated ownership
What is entitlement management?
Publication date not specified · DSE reviewed August 25, 2026
GuideImportant
Permission-trim AI retrieval before it touches customer data
Microsoft Learn: Document-Level Access Control in Azure AI Search
Publication date not specified · DSE reviewed August 17, 2026
GuideInformation
Pilot Data Deduplication on the intended workload before enabling it broadly
Installing and enabling Data Deduplication
Publication date not specified · DSE reviewed September 8, 2026
GuideImportant
Pilot the Active Directory Protected Users group before placing privileged accounts inside it
Protected Users security group
Publication date not specified · DSE reviewed August 25, 2026
GuideImportant
Place a failover-cluster witness outside the failure domain it must arbitrate
Microsoft Learn: What is a quorum witness
Published March 28, 2025 · DSE reviewed August 11, 2026
GuideInformation
Place configuration and ingestion DCEs in the regions each function requires
Data collection endpoints in Azure Monitor - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Place NAT Gateway behind Azure Firewall without bypassing spoke inspection
Integrate NAT Gateway with Azure Firewall in Hub and Spoke Network - Azure NAT Gateway | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Plan a new account when moving standard block blobs to premium
Premium block blob storage accounts - Azure Storage | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Plan a new node type for nonmanaged Service Fabric zone migration
Migrate an Azure Service Fabric cluster to availability zone support - Azure Service Fabric | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Plan an all-node detachment before increasing a shared disk's maxShares
Share an Azure managed disk across VMs - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Plan an explicit retrieval path for archived Azure blobs
Access tiers for blob data - Azure Storage | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Plan Bastion Kerberos DNS changes as a redeployment dependency
Configure Bastion for Kerberos authentication - Azure portal - Azure Bastion | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistInformation
Plan BitLocker maintenance for Cluster Shared Volumes
Use BitLocker with Cluster Shared Volumes
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Plan cluster volume count around metadata ownership and capacity
Plan volumes on Azure Local and Windows Server clusters
Publication date not specified · DSE reviewed September 8, 2026
GuideAdvisory
Plan Defender for Identity around fixed workspace geolocation and 180-day retention
Privacy with Microsoft Defender for Identity
Published September 28, 2025 · DSE reviewed August 26, 2026
ExplainerAdvisory
Plan Defender for Identity operations around the unified portal and 30-day hunting retention
Microsoft Defender for Identity in the Microsoft Defender portal
Published February 14, 2024 · DSE reviewed August 26, 2026
PlaybookAdvisory
Plan Defender for Identity sensor coverage by server role
Microsoft Defender for Identity deployment overview
Published August 7, 2026 · DSE reviewed August 26, 2026
GuideInformation
Plan DFS client return after a target comes back online
Enable or Disable Referrals and Client Failback
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Plan exclusions within a DHCP scope before activating its address range
DHCP scopes in Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Plan for an ACI restart when changing managed identities
Enable Managed Identity in a Container Group - Azure Container Instances | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Plan maintenance suppression without expecting delayed alert notifications
Alert processing rules for Azure Monitor alerts - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Plan NPS domain access and authentication-method compatibility together
Plan NPS as a RADIUS server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Plan NPS server certificates even when Wi-Fi users authenticate with passwords
Deploy Password-Based 802.1X Authenticated Wireless Access
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Plan private network access for Windows Admin Center inside an Azure VM
Manage a Windows VMs using Windows Admin Center in Azure
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Plan processor compatibility before moving a VM across CPU generations
Configure processor compatibility in Hyper-V virtual machines
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Plan remote-session locking behavior for Entra-authenticated RDP
Connect to a Remote PC with Single Sign-On Using Microsoft Entra Authentication
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Plan removal and recovery of the Remote Desktop Connection app
Uninstall and Reinstall the Remote Desktop Connection App in Windows
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Plan Storage Migration Service cutover around the server identity handoff
How cutover works in Storage Migration Service
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Plan the assignment handoff when updating an Intune baseline
Configure security baseline policies in Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Plan the Autopilot identity handoff before motherboard repair
Windows Autopilot motherboard replacement | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Plan the client address pool for Azure Network Adapter
Connect server to Azure Virtual Network - Azure Network Adapter
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Plan the hosted cache server alongside its BranchCache clients
Deploy BranchCache Hosted Cache Mode
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Plan the Hyper-V host role before installing guest workloads
Install Hyper-V in Windows and Windows Server
Publication date not specified · DSE reviewed September 8, 2026
PlaybookInformation
Plan the one-way boundary of availability-set migration to Flexible scale sets
Migrate availability sets to Virtual Machine Scale Sets - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Plan the RD Connection Broker outage before upgrading RDS roles
Upgrade Remote Desktop Services deployments
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Plan the VM state transition before changing a hibernated machine's disks or NICs
Hibernation overview - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Plan the WAC high-availability transition across the 2410 architecture change
Deploy Windows Admin Center with High Availability
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Plan Trusted Launch rollback as a one-way security transition
Enable Trusted launch on existing Gen2 VMs - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Plan update-ring uninstall as immediate recovery work, not scheduled maintenance
Manage Windows Update Ring Policies - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideImportant
Plan Windows 10 ESU Year 2 without confusing 22H2 and LTSC
Microsoft Learn — Extended Security Updates program for Windows 10
Published November 17, 2025 · DSE reviewed August 4, 2026
GuideInformation
Plan workload movement separately from scale-set zone expansion
Customer-selected availability zones for Virtual Machine Scale Sets - Azure Virtual Machine Scale Sets | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerAdvisory
Prefer granular alert tuning before Defender for Identity detection exclusions
Configure Defender for Identity detection exclusions in Microsoft Defender
Published August 10, 2026 · DSE reviewed August 26, 2026
ChecklistInformation
Prepare a Robocopy pre-seed for DFS Replication
Use Robocopy to pre-seed files for DFS Replication
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Prepare an additional HGS node without overlooking its identity and DNS prerequisites
Configure additional HGS nodes
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Prepare and sign the template disk used for shielded VM provisioning
Create a Windows shielded VM template disk
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Prepare federation certificate names before a Work Folders lab becomes production
Deploy Work Folders with AD FS and Web Application Proxy - Step 1, Set Up AD FS
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Prepare HANA backup keys on both replication nodes before takeover
Back up SAP HANA System Replication databases on Azure VMs using Azure Backup - Azure Backup | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Prepare regional disk encryption sets before replicating a gallery image
Create an encrypted image version with customer-managed keys - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Prepare scale-set workloads for automatic OS disk replacement
Automatic OS image upgrades with Azure Virtual Machine Scale Sets - Azure Virtual Machine Scale Sets | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Prepare the App Service custom-domain binding before regional cutover
Relocate Azure App Services to another region - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Prepare the Intune approver group before protecting role changes
Use Multi Admin Approval in Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Prepare the restart and feature checks for a Secured-core server change
Configure Secured-core server for Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Prepare users for file transfer and printing in the RDS web client
Get started with the web client for Remote Desktop Services
Publication date not specified · DSE reviewed September 8, 2026
BriefingAdvisory
Preserve ATA investigation data and document exclusions before migration
Migrate from Advanced Threat Analytics to Microsoft Defender for Identity
Published July 2, 2026 · DSE reviewed August 26, 2026
ChecklistInformation
Preserve Azure's provisioning media path in a generalized Windows image
Deprovision or generalize a VM before creating an image - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Preserve Company Portal consent when planning Win32 auto-updates
Add Win32 app supersedence - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Preserve device identity when joining Intune fleet inventory
Device Query for Multiple Devices - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Preserve file state when changing a redirected-folder server path
Enable optimized moves of redirected folders
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Preserve Front Door WAF overrides when changing a managed ruleset
Azure Web Application Firewall DRS rule groups and rules | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Preserve HGS signing and encryption keys through certificate renewal
Obtain certificates for HGS
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Preserve long NPS expressions outside the console editor
Use Regular Expressions in NPS
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Preserve older S/MIME decryption keys when importing replacement certificates
Use imported PFX certificates in Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Preserve probes and application paths in a private Application Gateway NSG
Private Application Gateway deployment - Azure Application Gateway | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Preserve Profiler files when Web Deploy updates a Windows App Service application
.NET Profiler for App Service - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Preserve Route Server BGP communication when inserting a firewall route
Troubleshoot Azure Route Server issues | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Preserve the current VM state before applying an older checkpoint
Using checkpoints
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Preserve the link between a temporary zero-day name and its later CVE identifier
Mitigate zero-day vulnerabilities - Microsoft Defender Vulnerability Management | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Preserve the main-template context when testing one ARM file
ARM template test toolkit - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Preserve the OEMConfig schema context when investigating a changed setting
Use OEMConfig on Android Enterprise devices in Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Preserve the submission envelope when integrating a phishing-report button
Configure user reported message settings in Microsoft Defender for Office 365 - Microsoft Defender for Office 365 | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Preserve the VM adapter identity before starting an SDN tenant workload
Create a VM and connect to a tenant virtual network or VLAN
Publication date not specified · DSE reviewed September 8, 2026
ChecklistAdvisory
Preserve UAC token boundaries in privileged workflows
How User Account Control works
Published April 23, 2026 · DSE reviewed August 26, 2026
GuideInformation
Preserve Update Manager evidence before its query windows expire
Query Resources with Azure Resource Graph in Azure Update Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Preserve URI-based deployment for ARM pipeline templates using relativePath
Continuous integration with Azure Pipelines - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Preserve user-profile disk paths during an RDS file-server move
Migrate your Remote Desktop Services deployment
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Preserve Virtual WAN route configuration before enabling routing intent
How to configure Virtual WAN Hub routing policies - Azure Virtual WAN | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Prevent unintended default-profile gaps between autoscale schedules
Autoscale with multiple profiles - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingAdvisory
Prioritize password risks in one cross-provider identity view
Investigate identity password protection
Published August 24, 2026 · DSE reviewed August 26, 2026
GuideInformation
Protect an NPS configuration export and review its import limits
Export an NPS Configuration for Import on Another Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Prove a remediation detector before allowing its paired fix
Use Remediations to Detect and Fix Support Issues - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistImportant
Prove an AD CS certification authority can be restored—not merely backed up
Migrate a certification authority in Windows Server
Publication date not specified · DSE reviewed August 25, 2026
ExplainerAdvisory
Prove BitLocker Network Unlock across firmware, DHCP, and WDS
Network Unlock
Published July 29, 2025 · DSE reviewed August 26, 2026
PlaybookImportant
Prove Cluster-Aware Updating against the workload—not just the cluster
Cluster-Aware Updating overview
Publication date not specified · DSE reviewed August 25, 2026
BriefingAdvisory
Prove dMSA migration through account and event evidence
Setting up delegated Managed Service Accounts (dMSA) in Windows Server 2025
Published May 30, 2025 · DSE reviewed August 26, 2026
PlaybookImportant
Prove Windows DHCP failover before the primary server is unavailable
Microsoft Learn: DHCP failover in Windows Server
Published March 11, 2025 · DSE reviewed August 11, 2026
GuideInformation
Provide cluster-local certificate secrets when moving to Application Gateway for Containers
Migration Overview - Move Application Gateway Ingress Controller (AGIC) services to Application Gateway for Containers | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Publish certificate policy securely to disconnected domain clients
Certificate Enrollment Policy Web Service overview
Published February 14, 2025 · DSE reviewed August 26, 2026
GuideInformation
Qualify an accelerated-networking configuration before enabling it
Accelerated Networking for Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Qualify PowerShell Direct as a host-to-guest administration path
Manage Windows Virtual Machines with PowerShell Direct
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Qualify predictive scale-out without removing reactive autoscale
Use predictive autoscale to scale out before load demands in virtual machine scale sets - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Qualify RDS IP virtualization for an application compatibility issue
Remote Desktop IP virtualization in Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Qualify the account model for live migration in a workgroup cluster
Use live migration with workgroup clusters in Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Query Defender CVE enrichment at tenant scope instead of mistaking missing fields for absent data
Transition from grouped to individual recommendations in Defender for Cloud - Microsoft Defender for Cloud | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistImportant
Raise Active Directory functional levels only after every domain controller earns the change
Microsoft Learn: Active Directory Domain Services functional levels
Published October 30, 2025 · DSE reviewed August 11, 2026
PlaybookAdvisory
Raise the RID pool after rollback to prevent identifier reuse
AD Forest Recovery - Raising RID pools
Published May 12, 2025 · DSE reviewed August 26, 2026
ExplainerInformation
Re-pin workbook components when their configuration changes
Manage Azure Monitor workbooks - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Re-resolve Service Fabric endpoints after the listener rejects a stale identity
Service communication with the ASP.NET Core - Azure Service Fabric | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Read a Health Service fault as a possible root-cause summary
Health Service faults
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Read a RAS GRE benchmark in the context of its TCP session count
RAS Gateway GRE Tunnel Throughput and Performance
Publication date not specified · DSE reviewed September 8, 2026
ExplainerInformation
Read an Azure metric average with its missing measurements in view
Azure Monitor metrics aggregation and display explained - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Read Code Optimizations memory percentages against trace allocations
Access and Interpret Code Optimizations Results - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Read eSIM activation status separately from carrier connectivity
Enable eSIM data connections in Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistAdvisory
Read objectVersion and rangeUpper before mapping AD and Exchange schema levels
Find the Current Active Directory Schema Version
Published July 8, 2025 · DSE reviewed August 26, 2026
ExplainerInformation
Read SDK retry counts as attempts, not an inventory of lost telemetry
Software Development Kit (SDK) stats in Azure Monitor Application Insights - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Read storage-pool and virtual-disk health states separately
Storage Spaces and Storage Spaces Direct health and operational states
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Read System Insights forecasts with their status and local context
System Insights capabilities in Windows Server
Publication date not specified · DSE reviewed September 8, 2026
PlaybookAdvisory
Read the Identity Security dashboard as posture and threat context, not proof of control
Identity Security dashboard overview (Preview)
Published July 2, 2026 · DSE reviewed August 26, 2026
GuideInformation
Read the managed Run Command script result separately from provisioning status
Run scripts in a Windows VM in Azure using managed Run Commands - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Read the Windows VM creation flag before planning a patch-mode transition
Automatic Guest Patching for Azure Virtual Machines and Scale Sets - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Read Virtual Network flow counters as interval contributions
Virtual Network Flow Logs - Azure Network Watcher | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Read VM Application audit compliance within its operating-system filter
Govern and enforce compliance for VM Applications with Azure Policy - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Read Windows 11 hardware readiness separately from the remote-work score
Work From Anywhere Report in Endpoint Analytics - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Reassess delegated role-assignment denylists when roles change
Examples to delegate Azure role assignment management with conditions - Azure ABAC | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Rebind scheduled maintenance after recreating a VM with the same name
Troubleshoot problems with Maintenance Configurations - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Rebuild resource grouping and authorization when moving metric queries to getBatch
Migrate from the metrics API to the getBatch API - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Rebuild the scope contract when moving Azure resources between groups
Move Azure resources to a new resource group or subscription - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Recheck discovered resources before running a preview Chaos Studio Scenario
Chaos Studio Workspaces overview - Azure Chaos Studio | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Recheck Spot recovery ownership when enabling scale-set autoscale
Create a scale set that uses Azure Spot Virtual Machines - Azure Virtual Machine Scale Sets | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingInformation
Recognize tenant-wide targeting before using the Windows client monitoring installer
Set Up the Azure Monitor Agent on Windows Client Devices - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Reconcile a Log Analytics volume spike against receipt time before changing collection
Analyze usage in a Log Analytics workspace in Azure Monitor - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Reconcile both halves of a Virtual WAN P2S client pool in the route table
Configure address pools for Virtual WAN point-to-site VPN - PowerShell - Azure Virtual WAN | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistInformation
Reconcile guest disk mappings before converting an Azure VM from SCSI to NVMe
Convert SCSI to NVMe for Linux and Windows VMs - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Reconcile physical zones before using a shared capacity reservation
Share a Capacity Reservation Group in Azure - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Reconcile remediation permissions after changing an Azure Policy definition
Remediate non-compliant resources - Azure Policy | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Reconcile the retained Gen1 image reference after a Trusted Launch upgrade
Upgrade Gen1 VMs to Trusted launch - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Reconcile volume letters when moving disks between Windows computers
Move disks to another computer
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Reconfigure File Sync managed identity when registering an entirely new server
How to Use Managed Identities with Azure File Sync | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingAdvisory
Reconstruct identity alerts from chronology and entity relationships
Investigate alerts in Microsoft Defender for Identity
Published July 2, 2026 · DSE reviewed August 26, 2026
GuideImportant
Record Azure Bastion sessions only with a governed evidence lifecycle
Configure Bastion session recording
Publication date not specified · DSE reviewed August 25, 2026
GuideAdvisory
Record Conditional Access session-lifetime exceptions as explicit risk decisions
Conditional Access: Session
Publication date not specified · DSE reviewed August 25, 2026
GuideAdvisory
Record the Defender for Identity workspace ID and name for support and proxy changes
View information on the Defender for Identity About page
Published July 2, 2026 · DSE reviewed August 26, 2026
GuideInformation
Record the selected MPI environment alongside an Azure HPC image version
Azure HPC/AI VM images - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookImportant
Recover Active Directory as an identity service, not just a server
Microsoft Active Directory forest recovery guide
Published July 11, 2025 · DSE reviewed August 4, 2026
GuideInformation
Reduce Azure role-assignment counts without preserving excessive scope
Troubleshoot Azure RBAC limits - Azure RBAC | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Reestablish a global catalog after forest-root recovery
AD Forest Recovery - Adding the GC
Published May 12, 2025 · DSE reviewed August 26, 2026
GuideInformation
Reestablish Key Vault autorotation settings after regional recreation
Relocate Azure Key Vault to another region - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Refresh a key-based Azure Function action after rotating its access key
Create and manage action groups in Azure Monitor - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Refresh Site Recovery target checks after repairing a readiness warning
Azure Site Recovery dashboard and built-in alerts - Azure Site Recovery | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Refresh Windows P2S client profiles after changing an Azure Files VPN gateway
Configure a Point-to-Site VPN on Windows for Azure Files | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Register a manually installed Mobility agent without discovery credentials
About the Mobility service for disaster recovery of VMware VMs and physical servers with Azure Site Recovery - Azure Site Recovery | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Register the RADIUS-speaking access device, not the end-user computer
RADIUS Clients
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Register the Windows Admin Center gateway before enabling Azure integration
Configuring Azure Integration
Publication date not specified · DSE reviewed September 8, 2026
ExplainerAdvisory
Register-DnsServerDirectoryPartition: register dns server directory partition against recorded identity and DNS state
Register-DnsServerDirectoryPartition
Publication date not specified · DSE reviewed August 27, 2026
PlaybookImportant
Rehearse every Hyper-V Replica failover mode before a real outage
Microsoft Learn: Fail over a replicated virtual machine with Hyper-V Replica
Published April 28, 2026 · DSE reviewed August 11, 2026
PlaybookAdvisory
Rehearse Windows DNSSEC key-master transfer and offline-role seizure separately
Transfer the DNSSEC Key Master Role in Windows DNS Server
Published August 1, 2025 · DSE reviewed August 26, 2026
PlaybookAdvisory
Reinstall DNS on every restored controller that lost the role
AD Forest Recovery - Configure DNS Server service
Published May 12, 2025 · DSE reviewed August 26, 2026
PlaybookAdvisory
Remove an identity sensor deliberately when decommissioning its domain controller
Remove the Microsoft Defender for Identity sensor
Published July 2, 2026 · DSE reviewed August 26, 2026
GuideInformation
Remove case-only distinctions before combining metrics in Managed Prometheus
Query Prometheus Metrics using the API and PromQL - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Remove Entra Connect replication rights only when Password Hash Sync does not need them
Remediate hybrid security posture assessments in Defender for Identity
Published August 18, 2026 · DSE reviewed August 26, 2026
GuideInformation
Remove query shapes that prevent Resource Graph continuation
Work with large data sets - Azure Resource Graph | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistAdvisory
Remove standard-user modification rights from Group Policy objects
Group policy security assessments
Published September 15, 2025 · DSE reviewed August 26, 2026
GuideInformation
Remove VM Application consumer references before deleting the published application
Manage, Update, and Delete VM Applications on Azure - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Remove-ADCentralAccessPolicyMember: remove adcentral access policy member with bounded evidence
Remove-ADCentralAccessPolicyMember
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Remove-ADClaimTransformPolicy: remove adclaim transform policy against recorded identity and DNS state
Remove-ADClaimTransformPolicy
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Remove-ADComputer: remove adcomputer against recorded identity and DNS state
Remove-ADComputer
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Remove-ADComputerServiceAccount: remove adcomputer service account with before-and-after evidence
Remove-ADComputerServiceAccount
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Remove-ADDomainControllerPasswordReplicationPolicy: remove addomain controller password replication policy with rollback checks
Remove-ADDomainControllerPasswordReplicationPolicy
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Remove-ADFineGrainedPasswordPolicySubject: remove adfine grained password policy subject against recorded identity and DNS state
Remove-ADFineGrainedPasswordPolicySubject
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Remove-ADGroupMember: remove adgroup member under AD/DNS change control
Remove-ADGroupMember
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Remove-ADObject: remove adobject with rollback checks
Remove-ADObject
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Remove-ADPrincipalGroupMembership: remove adprincipal group membership against recorded identity and DNS state
Remove-ADPrincipalGroupMembership
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Remove-ADReplicationSubnet: remove adreplication subnet with bounded evidence
Remove-ADReplicationSubnet
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Remove-DnsServerClientSubnet: remove dns server client subnet with before-and-after evidence
Remove-DnsServerClientSubnet
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Remove-DnsServerForwarder: remove dns server forwarder against recorded identity and DNS state
Remove-DnsServerForwarder
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Remove-DnsServerQueryResolutionPolicy: remove dns server query resolution policy against recorded identity and DNS state
Remove-DnsServerQueryResolutionPolicy
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Remove-DnsServerRecursionScope: remove dns server recursion scope under AD/DNS change control
Remove-DnsServerRecursionScope
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Remove-DnsServerResourceRecord: remove dns server resource record against recorded identity and DNS state
Remove-DnsServerResourceRecord
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Remove-DnsServerResponseRateLimitingExceptionlist: remove dns server response rate limiting exceptionlist under AD/DNS change control
Remove-DnsServerResponseRateLimitingExceptionlist
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Remove-DnsServerRootHint: remove dns server root hint under AD/DNS change control
Remove-DnsServerRootHint
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Remove-DnsServerSigningKey: remove dns server signing key against recorded identity and DNS state
Remove-DnsServerSigningKey
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Remove-DnsServerTrustAnchor: remove dns server trust anchor with rollback checks
Remove-DnsServerTrustAnchor
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Remove-DnsServerVirtualizationInstance: remove dns server virtualization instance under AD/DNS change control
Remove-DnsServerVirtualizationInstance
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Remove-DnsServerZone: remove dns server zone with bounded evidence
Remove-DnsServerZone
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Remove-DnsServerZoneDelegation: remove dns server zone delegation with rollback checks
Remove-DnsServerZoneDelegation
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Remove-DnsServerZoneTransferPolicy: remove dns server zone transfer policy with before-and-after evidence
Remove-DnsServerZoneTransferPolicy
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Renew an Apple app location token without replacing its Intune record
Manage Apple Volume-Purchased Apps - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Repair a persistently failing log-alert query before restoring its rule
Troubleshoot log alerts in Azure Monitor - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Replace a legacy Mac SSO profile without leaving competing payloads
Configure Platform SSO for macOS devices - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingInformation
Replace ambiguous automatic-forwarding settings with an explicit decision
Configure outbound spam policies - Microsoft Defender for Office 365 | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Replace embedded resource links when reusing a workbook deployment
Azure Monitor workbooks and Azure Resource Manager templates - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Replace ineffective diagnostic retention settings without overwriting other lifecycle rules
Migrate from Diagnostic Settings Storage Retention to Azure Storage Lifecycle Management - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Replace standing administrator access with a controlled PIM lifecycle
Microsoft Learn: Plan a Privileged Identity Management deployment
Published April 23, 2026 · DSE reviewed July 19, 2026
PlaybookImportant
Replace standing Microsoft partner administration with granular, time-bound GDAP
Microsoft Learn: Introduction to granular delegated admin privileges (GDAP)
Publication date not specified · DSE reviewed August 17, 2026
GuideInformation
Replace the Windows Admin Center HTTPS certificate deliberately
Update the certificate used by Windows Admin Center
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Request dimensional time series explicitly instead of accepting a rolled-up metric
Azure Monitor REST API walkthrough - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Require a separate completion signal for cloud-init custom-data work
Custom data on Azure virtual machines - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Require both Service Fabric balancing thresholds for the same metric
Balance your Azure Service Fabric cluster - Azure Service Fabric | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookImportant
Require independent authorization for destructive Azure Backup operations
Configure Multi-user authorization using Resource Guard in Azure Backup
Published December 30, 2025 · DSE reviewed August 25, 2026
BriefingAdvisory
Require RPC packet privacy on AD CS enrollment interfaces flagged as ESC11
Certificates security posture assessment in Microsoft Defender for Identity
Published July 2, 2026 · DSE reviewed August 26, 2026
GuideImportant
Require SMB signing only after proving every client and server path
Overview of Server Message Block signing in Windows
Publication date not specified · DSE reviewed August 25, 2026
GuideImportant
Require token protection only for verified device, client, and resource combinations
Token Protection in Microsoft Entra Conditional Access
Publication date not specified · DSE reviewed August 25, 2026
ExplainerAdvisory
Require TPM key attestation for hardware-bound certificate issuance
TPM Key Attestation
Published May 12, 2025 · DSE reviewed August 26, 2026
PlaybookAdvisory
Require valid system-state backup before restoring a virtualized DC
Restore a virtualized domain controller in Windows Server
Published January 24, 2025 · DSE reviewed August 26, 2026
GuideInformation
Reschedule deduplication jobs around measured workload demand
Advanced Data Deduplication settings
Publication date not specified · DSE reviewed September 8, 2026
GuideAdvisory
Reset both sides of trust credentials in recovery order
AD Forest Recovery - Resetting a trust password
Published May 12, 2025 · DSE reviewed August 26, 2026
BriefingAdvisory
Reset-ADServiceAccountMigration: reset adservice account migration under AD/DNS change control
Reset-ADServiceAccountMigration
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Reset-ADServiceAccountPassword: reset adservice account password with before-and-after evidence
Reset-ADServiceAccountPassword
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Reset-DnsServerZoneKeyMasterRole: reset dns server zone key master role against recorded identity and DNS state
Reset-DnsServerZoneKeyMasterRole
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Resolve a duplicate iOS mail profile before expecting Intune to replace it
Configure email settings in Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Resolve Azure deny-assignment exclusions and inheritance before adding roles
List Azure deny assignments - Azure RBAC | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Resolve Azure Policy Kubernetes template conflicts at their source
Learn Azure Policy for Kubernetes - Azure Policy | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Resolve folder and file-ID scope gaps before migrating Cloud Apps file policies
Migrate file policies to Microsoft Purview - Microsoft Defender for Cloud Apps | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Resolve Front Door WAF association scope before testing a rate-limit rule
Configure a WAF Rate-Limit Rule for Azure Front Door | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Resolve IP-based identity activity to computers before investigation
Network Name Resolution (NNR) in Microsoft Defender for Identity
Published February 21, 2024 · DSE reviewed August 26, 2026
GuideInformation
Resolve Prometheus scrape credential files through the mounted secret, not a host path
Create custom Prometheus scrape job from your Kubernetes cluster using ConfigMap - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Resolve Windows Firewall rule precedence before adding exceptions
Windows Firewall Rules
Published June 6, 2025 · DSE reviewed August 26, 2026
GuideInformation
Restore a blob's current content separately from undeleting its versions
Blob Versioning in Azure Storage - Azure Storage | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Restore Microsoft Entra sign-in after a Windows VMAccess password reset
Reset access to an Azure Windows VM - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookInformation
Restore the prior quantity when a capacity-reservation increase fails
Modify a capacity reservation in Azure - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingAdvisory
Restore-DnsServerPrimaryZone: restore dns server primary zone under AD/DNS change control
Restore-DnsServerPrimaryZone
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Resynchronize Azure peering after changing a member's address space
Create Virtual Network Peering Between Different Subscriptions - Azure Virtual Network | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Retain a DNS plan when building a workgroup failover cluster
Create a workgroup cluster in Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Retrieve Intune device diagnostics before the collection expires
Device Action: Collect Diagnostics - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Return the right state-change result from Service Fabric data-loss recovery
Azure Service Fabric disaster recovery - Azure Service Fabric | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Review accepted VPN protocols after installing or upgrading RRAS
How to install and configure Remote Access (RAS) as a VPN server
Publication date not specified · DSE reviewed September 8, 2026
PlaybookAdvisory
Review Active Directory Forest Recovery - Prerequisites before AD/DNS changes
Active Directory Forest Recovery - Prerequisites
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Active Directory Privileged Accounts and Groups Guide before AD/DNS changes
Active Directory Privileged Accounts and Groups Guide
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Active Directory replication error 8464 before AD/DNS changes
Active Directory replication error 8464
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Active Directory replication Event ID 2042 (It has been too long since this machine replicated) before AD/DNS changes
Active Directory replication Event ID 2042 (It has been too long since this machine replicated)
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Active Directory replication Event ID 2087 (DNS lookup failure caused replication to fail) before AD/DNS changes
Active Directory replication Event ID 2087 (DNS lookup failure caused replication to fail)
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review AD and LDS diagnostic event logging before AD/DNS changes
AD and LDS diagnostic event logging
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review AD DS Configuration Wizard Page Descriptions before AD/DNS changes
AD DS Configuration Wizard Page Descriptions
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review AD DS Tier Model for Privileged Access Security in Windows Server before AD/DNS changes
AD DS Tier Model for Privileged Access Security in Windows Server
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Adprep LDF changes before a Windows Server schema update
Schema updates in Windows Server
Published February 6, 2025 · DSE reviewed August 26, 2026
GuideInformation
Review an empty folder before mounting another Windows volume into it
Assign a mount point folder path to a drive in Windows and Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Review an RDP file destination and redirections before connecting
Understanding security warnings when opening Remote Desktop (RDP) files
Publication date not specified · DSE reviewed September 8, 2026
PlaybookAdvisory
Review Appendix A - Reviewing Key AD DS Terms before AD/DNS changes
Appendix A - Reviewing Key AD DS Terms
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Appendix G - Securing Administrators Groups in Active Directory before AD/DNS changes
Appendix G - Securing Administrators Groups in Active Directory
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Appendix H - Securing Local Administrator Accounts and Groups before AD/DNS changes
Appendix H - Securing Local Administrator Accounts and Groups
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Appendix M - Document Links and Recommended Reading before AD/DNS changes
Appendix M - Document Links and Recommended Reading
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Review application-wide click attribution when introducing parent tags
Feature extensions for Application Insights JavaScript SDK (Click Analytics) - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Review Apps and APIs require access before AD/DNS changes
Apps and APIs require access
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Review ARM template revisions separately from resource API versions
Template structure and syntax - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Review Can't sign in to the domain before AD/DNS changes
Can't sign in to the domain
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Review catalog installer overrides again for each superseding app
Add an Enterprise App Catalog App to Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Review Change Windows Active Directory and LDS user password through LDAP before AD/DNS changes
Change Windows Active Directory and LDS user password through LDAP
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Configure a certification authority to use ML-DSA in Windows Server before AD/DNS changes
Configure a certification authority to use ML-DSA in Windows Server
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Configure a secondary name server before AD/DNS changes
Configure a secondary name server
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Configure Online Responders (OCSP) to use ML-DSA in Windows Server before AD/DNS changes
Configure Online Responders (OCSP) to use ML-DSA in Windows Server
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Configure the Certificate Enrollment Policy Web Service in Windows Server before AD/DNS changes
Configure the Certificate Enrollment Policy Web Service in Windows Server
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Review copied permissions and tags before assigning a cloned Intune role
Create a custom role in Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Review Creating an Organizational Unit Design before AD/DNS changes
Creating an Organizational Unit Design
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Review data preservation before changing a disk between dynamic and basic
Convert a disk to Dynamic or Basic
Publication date not specified · DSE reviewed September 8, 2026
PlaybookAdvisory
Review DC returns only 5000 values in LDAP response before AD/DNS changes
DC returns only 5000 values in LDAP response
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review DCPROMO answer file syntax before AD/DNS changes
DCPROMO answer file syntax
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Review deduplication and DFS Replication as separate storage operations
Data Deduplication interoperability in Windows Server
Publication date not specified · DSE reviewed September 8, 2026
ExplainerAdvisory
Review Defender for Identity tuning-rule matches before keeping or removing rules
Monthly operational guide for Microsoft Defender for Identity
Published July 2, 2026 · DSE reviewed August 26, 2026
PlaybookAdvisory
Review Define Security Templates By Using the Security Templates Snap-In before AD/DNS changes
Define Security Templates By Using the Security Templates Snap-In
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Review dependency expansion when an ARM deployment job exceeds size limits
Job size exceeded error - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Review Description of the Lingering Object Liquidator tool before AD/DNS changes
Description of the Lingering Object Liquidator tool
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review DNS namespace planning before AD/DNS changes
DNS namespace planning
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review DNS Policies before AD/DNS changes
DNS Policies Overview
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review DNS records not shown in DNS zones before AD/DNS changes
DNS records not shown in DNS zones
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Domain controllers don't demote before AD/DNS changes
Domain controllers don't demote
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Review domain health, sensor coverage, policy, and trust relationships together
Investigate an Active Directory domain
Published July 30, 2026 · DSE reviewed August 26, 2026
PlaybookAdvisory
Review Domain Name System (DNS) in Windows and Windows Server before AD/DNS changes
Domain Name System (DNS) in Windows and Windows Server
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Event IDs 4016 and 4004 when DNS updates time out before AD/DNS changes
Event IDs 4016 and 4004 when DNS updates time out
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Events 407 and 408 are reported in the DNS server event log before AD/DNS changes
Events 407 and 408 are reported in the DNS server event log
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Fail to run Get-ADGroupMember for domain local group before AD/DNS changes
Fail to run Get-ADGroupMember for domain local group
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Review file granularity before scaling a Data Lake analytics pipeline
Best Practices for Using Azure Data Lake Storage - Azure Storage | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Review file-server role placement before deploying Folder Redirection
Deploy Folder Redirection with Offline Files
Publication date not specified · DSE reviewed September 8, 2026
PlaybookAdvisory
Review Find servers that hold FSMO roles before AD/DNS changes
Find servers that hold FSMO roles
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Flexible Single-Master Operation (FSMO) placement and optimization on AD DCs before AD/DNS changes
Flexible Single-Master Operation (FSMO) placement and optimization on AD DCs
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review identity Secure Score, custom detections, and hunting every week
Weekly operational guide - Microsoft Defender for Identity
Published July 2, 2026 · DSE reviewed August 26, 2026
GuideInformation
Review infrastructure readiness for a two-node clustered file server
Deploy a two-node clustered file server
Publication date not specified · DSE reviewed September 8, 2026
PlaybookAdvisory
Review Install and Configure DNS Server on Windows Server before AD/DNS changes
Install and Configure DNS Server on Windows Server
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Review isolation retirement separately from whether an Azure VM size still runs
Isolation for VMs in Azure - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Review LAPS schema attributes and extended rights before delegation
Windows LAPS schema and rights extensions for Windows Server Active Directory
Published May 12, 2025 · DSE reviewed August 26, 2026
PlaybookAdvisory
Review LDAP Paged Queries with subordinate referrals are not chased properly before AD/DNS changes
LDAP Paged Queries with subordinate referrals are not chased properly
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review LDAP signing for Active Directory Domain Services on Windows Server before AD/DNS changes
LDAP signing for Active Directory Domain Services on Windows Server
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review LDAPS connection fails with event ID 36884 before AD/DNS changes
LDAPS connection fails with event ID 36884
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Let nonadministrators view deleted objects before AD/DNS changes
Let nonadministrators view deleted objects
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Linux accounts cannot get AES tickets before AD/DNS changes
Linux accounts cannot get AES tickets
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Review load-balancer membership when expanding RD Web and Gateway
Add high availability to the RD Web and Gateway web front
Publication date not specified · DSE reviewed September 8, 2026
PlaybookAdvisory
Review Make DCs to reply to LDAP Ping on UDP 138 port before AD/DNS changes
Make DCs to reply to LDAP Ping on UDP 138 port
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Review NPS authorization as an ordered network-policy decision
Configure Network Policies
Publication date not specified · DSE reviewed September 8, 2026
PlaybookAdvisory
Review Optimize domain controller location before AD/DNS changes
Optimize domain controller location
Publication date not specified · DSE reviewed August 27, 2026
BriefingInformation
Review outbound malware handling separately from custom inbound mail policies
Configure anti-malware policies for email - Microsoft Defender for Office 365 | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Review Password change for expired password failing before AD/DNS changes
Password change for expired password failing
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Password change processing and conflict resolution functionality in Windows before AD/DNS changes
Password change processing and conflict resolution functionality in Windows
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Review password-hash prerequisites before using Entra Domain Services for RDS
Microsoft Entra Domain Services and Remote Desktop Services
Publication date not specified · DSE reviewed September 8, 2026
BriefingAdvisory
Review patch evidence before tuning classic Defender for Identity alerts
Microsoft Defender for Identity classic alerts
Published August 16, 2026 · DSE reviewed August 26, 2026
GuideInformation
Review phishing-simulation domains and sending addresses as matching sets
Configure the advanced delivery policy for non-Microsoft phishing simulations and email delivery to SecOps mailboxes - Microsoft Defender for Office 365 | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Review Problems occur with DCs in AD integrated DNS zones before AD/DNS changes
Problems occur with DCs in AD integrated DNS zones
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Review Queue Storage message updates before chaining another work queue
Performance and scalability checklist for Queue Storage - Azure Storage | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Review RDS collection access at the collection boundary
Manage users in your RDS collection
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Review related-log sampling when migrating to Application Insights .NET SDK 3.x
Migrate Application Insights Classic API Software Development Kits (SDKs) to Azure Monitor OpenTelemetry - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Review RSS CPU distribution before tuning a web server network adapter
Network Adapter Performance Tuning in Windows Server
Publication date not specified · DSE reviewed September 8, 2026
PlaybookAdvisory
Review Safely virtualizing Active Directory Domain Services (AD DS) before AD/DNS changes
Safely virtualizing Active Directory Domain Services (AD DS)
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Service Accounts in Windows Server before AD/DNS changes
Service Accounts in Windows Server
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Review SMT behavior when selecting a Hyper-V scheduler
Manage Hyper-V Hypervisor Scheduler Types
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Review StandardV2 NAT Gateway cutover exceptions before relying on session continuity
What Is Azure NAT Gateway? | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Review Synchronizing Between AD DS and AD LDS Enters Endless Loop if the base DN is a Grandchild OU before AD/DNS changes
Synchronizing Between AD DS and AD LDS Enters Endless Loop if the base DN is a Grandchild OU
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Syskey.exe utility is no longer supported before AD/DNS changes
Syskey.exe utility is no longer supported
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review System Audit Policy recommendations before AD/DNS changes
System Audit Policy recommendations
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Review the database boundary in an Azure-hosted RDS design
Remote Desktop Services Architecture in Azure - Deployment Patterns and Best Practices
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Review the delay imposed by SMB authentication rate limiting
Configure SMB authentication rate limiter for Windows
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Review the last effective parameter assignment in an Azure CLI deployment
Deploy Bicep files with the Azure CLI - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Review the live-migration authentication path after a Windows Server upgrade
Set up hosts for live migration without Failover Clustering
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Review the protection boundary before connecting work and personal Android apps
Add App Configuration Policies for Managed Android Enterprise Devices - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Review the query-parameter boundary of an MSP metadata allowlist
Advanced Configuration for MSP - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Review the routing implications of extending an on-premises subnet into Azure
Extend your on-premises subnets into Azure using extended network for Azure
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Review the SDN Express configuration before deploying a clustered Network Controller
Deploy Network Controller with Failover Clustering on Windows Server and Azure Local
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Review the VM page's JIT defaults before using the access policy
Enable Just-in-Time Access - Microsoft Defender for Cloud | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Review the whole NetApp network sibling set before a feature upgrade
Configure network features for an Azure NetApp Files volume | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Review Transfer or seize Operation Master roles before AD/DNS changes
Transfer or seize Operation Master roles
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Troubleshoot common AD replication errors before AD/DNS changes
Troubleshoot common AD replication errors
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Troubleshoot DNS name resolution failures related to DNS forwarders before AD/DNS changes
Troubleshoot DNS name resolution failures related to DNS forwarders
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Troubleshoot Event ID 1311 messages before AD/DNS changes
Troubleshoot Event ID 1311 messages
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Troubleshoot replication error 8456 or 8457 before AD/DNS changes
Troubleshoot replication error 8456 or 8457
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Troubleshooting DNS clients before AD/DNS changes
Troubleshooting DNS clients
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Understanding the Active Directory Logical Model before AD/DNS changes
Understanding the Active Directory Logical Model
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Unexpected DNS record registration behavior when the DHCP server manages dynamic DNS updates before AD/DNS changes
Unexpected DNS record registration behavior when the DHCP server manages dynamic DNS updates
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review Use Ntdsutil to manage AD files before AD/DNS changes
Use Ntdsutil to manage AD files
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Review WAC management compatibility with enforced application control
WDAC enforced infrastructure in Windows Admin Center
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Review WAF custom-rule coverage before adding Application Gateway IPv6
Configure Application Gateway with a frontend public IPv6 address using the Azure portal - Azure Application Gateway | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Review What's New in Active Directory Domain Services Installation and Removal before AD/DNS changes
What's New in Active Directory Domain Services Installation and Removal
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Review When you run an LDAP query against a Windows Server 2008-based domain controller, you obtain a partial attribute list
When you run an LDAP query against a Windows Server 2008-based domain controller, you obtain a partial attribute list
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Revisit mirror policy when a Storage Spaces Direct cluster grows
Adding servers or drives to Storage Spaces Direct
Publication date not specified · DSE reviewed September 8, 2026
PlaybookAdvisory
Revoke Microsoft 365 sessions with evidence—not assumptions about token expiry
Microsoft Learn: Revoke user access in an emergency in Microsoft Entra ID
Publication date not specified · DSE reviewed August 17, 2026
PlaybookImportant
Route Azure Service Health alerts outside the affected workload
Create Service Health alerts in the Azure portal
Publication date not specified · DSE reviewed August 25, 2026
BriefingInformation
Route WSL findings through the host without assuming full Linux response features
Microsoft Defender for Endpoint plug-in for Windows Subsystem for Linux (WSL) - Microsoft Defender for Endpoint | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Run a daily identity-defense cycle across dashboards, incidents, hunting, tuning, and health
Daily operational guide - Microsoft Defender for Identity
Published July 2, 2026 · DSE reviewed August 26, 2026
ExplainerAdvisory
Run AD DS installation prerequisite tests before promotion
Install Active Directory Domain Services on Windows Server
Published April 18, 2025 · DSE reviewed August 26, 2026
PlaybookImportant
Run joiner, mover, and leaver automation from verified identity attributes
What are lifecycle workflows?
Publication date not specified · DSE reviewed August 25, 2026
ChecklistImportant
Run Teams Rooms as managed room systems, not oversized desktops
Microsoft Learn: Teams Rooms app and Windows versioning support
Published August 10, 2026 · DSE reviewed August 11, 2026
PlaybookAdvisory
Run Universal Print connectors as managed print infrastructure
Microsoft Learn: What is the Universal Print connector
Published June 11, 2024 · DSE reviewed August 11, 2026
BriefingAdvisory
Schedule identity reports without treating them as real-time detection
Download and schedule Defender for Identity reports in Microsoft Defender XDR (Preview)
Published July 2, 2026 · DSE reviewed August 26, 2026
GuideInformation
Schedule the full Microsoft Tunnel verbose-log collection window
Monitor the Microsoft Tunnel VPN solution for Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingAdvisory
Scope (Schema mismatch) error message occurs when you try to run the Active Directory Installation Wizard (Dcpromo.exe)
(Schema mismatch) error message occurs when you try to run the Active Directory Installation Wizard (Dcpromo.exe)
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Access is denied when joining computers in observed AD/DNS state
Access is denied when joining computers
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Accounts Have the LastLogonTimestamp Value Set to Future in observed AD/DNS state
Accounts Have the LastLogonTimestamp Value Set to Future
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Active Directory DC Locator performance counters in Windows Server in observed AD/DNS state
Active Directory DC Locator performance counters in Windows Server
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Active Directory Domain Services Replication Priority Boost in observed AD/DNS state
Active Directory Domain Services Replication Priority Boost
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Active Directory Forest Recovery - Determine how to recover the forest in observed AD/DNS state
Active Directory Forest Recovery - Determine how to recover the forest
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Active Directory Replication fails with Win32 error 8524 in observed AD/DNS state
Active Directory Replication fails with Win32 error 8524
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope ActiveDirectory in observed AD/DNS state
ActiveDirectory
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope ADFS 2.0 service fails to start in observed AD/DNS state
ADFS 2.0 service fails to start
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Advanced Active Directory Replication and Topology Management Using Windows PowerShell (Level 200) in observed AD/DNS state
Advanced Active Directory Replication and Topology Management Using Windows PowerShell (Level 200)
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Scope Android MAM Tunnel blocking to Edge rather than the whole device
Use Microsoft Tunnel VPN with Android devices that don't enroll with Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Scope app-protection patch requirements to the intended major OS branch
Manage device operating system versions with Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingAdvisory
Scope Appendix E - Securing Enterprise Admins Groups in Active Directory in observed AD/DNS state
Appendix E - Securing Enterprise Admins Groups in Active Directory
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope AuditPol and Local Security Policy results may differ in observed AD/DNS state
AuditPol and Local Security Policy results may differ
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Avoid registering unwanted Network Interface Controllers (NICs) in Domain Name System (DNS) in observed AD/DNS state
Avoid registering unwanted Network Interface Controllers (NICs) in Domain Name System (DNS)
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Best practices for securing Active Directory in observed AD/DNS state
Best practices for securing Active Directory
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Scope BranchCache client policy before enabling its firewall rules
Use Group Policy to Configure Domain Member Client Computers
Publication date not specified · DSE reviewed September 8, 2026
BriefingAdvisory
Scope c00002e2 error occurs in observed AD/DNS state
c00002e2 error occurs
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Can't Edit or Delete an AD Object and Receive Errors in observed AD/DNS state
Can't Edit or Delete an AD Object and Receive Errors
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Configure certificates for LDAP over SSL in Active Directory Domain Services in observed AD/DNS state
Configure certificates for LDAP over SSL in Active Directory Domain Services
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Configure Policy Settings for Windows LAPS in observed AD/DNS state
Configure Policy Settings for Windows LAPS
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Configure the Certificate Enrollment Web Service role service in observed AD/DNS state
Configure the Certificate Enrollment Web Service role service
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Configuring a Computer for Troubleshooting in observed AD/DNS state
Configuring a Computer for Troubleshooting
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Creating a Site Link Bridge Design in observed AD/DNS state
Creating a Site Link Bridge Design
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Scope Defender for Identity action accounts to remediation needs
Configure Microsoft Defender for Identity action accounts
Published July 2, 2026 · DSE reviewed August 26, 2026
BriefingAdvisory
Scope Defender for Identity visibility to explicit domains and organizational units
Configure scoped access for Microsoft Defender for Identity
Published July 2, 2026 · DSE reviewed August 26, 2026
BriefingAdvisory
Scope Delegating Administration by Using OU Objects in observed AD/DNS state
Delegating Administration by Using OU Objects
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Delegating Administration of Account OUs and Resource OUs in observed AD/DNS state
Delegating Administration of Account OUs and Resource OUs
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Diagnose AD replication failures in observed AD/DNS state
Diagnose AD replication failures
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope DNS Server becomes an island in observed AD/DNS state
DNS Server becomes an island
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Don't be afraid of DNS scavenging, just be patient in observed AD/DNS state
Don't be afraid of DNS scavenging, just be patient
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Enable Lightweight Directory Access Protocol (LDAP) over Secure Sockets Layer (SSL) in observed AD/DNS state
Enable Lightweight Directory Access Protocol (LDAP) over Secure Sockets Layer (SSL)
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Error 0x40 The Specified Network Name Is No Longer Available in observed AD/DNS state
Error 0x40 The Specified Network Name Is No Longer Available
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Error message when you try to access a server locally by using its FQDN or its CNAME alias
Error message when you try to access a server locally by using its FQDN or its CNAME alias after you install Windows Server 2003 Service Pack 1
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Error when running the Adprep /rodcprep command in Windows Server 2008 in observed AD/DNS state
Error when running the Adprep /rodcprep command in Windows Server 2008
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Event ID 5722 is logged in observed AD/DNS state
Event ID 5722 is logged
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope How to complete a semantic database analysis for the Active Directory database by using Ntdsutil.exe in observed AD/DNS state
How to complete a semantic database analysis for the Active Directory database by using Ntdsutil.exe
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope How to disable TLS 1.3 for AD and LDAP in observed AD/DNS state
How to disable TLS 1.3 for AD and LDAP
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Install a New Windows Server 2012 Active Directory Forest (Level 200) in observed AD/DNS state
Install a New Windows Server 2012 Active Directory Forest (Level 200)
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Issues when AD replication and Netlogon RPCs request backlog values are exceeded in observed AD/DNS state
Issues when AD replication and Netlogon RPCs request backlog values are exceeded
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Jet database errors and recovery steps in observed AD/DNS state
Jet database errors and recovery steps
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope LDAP session security settings and requirements after ADV190023 in observed AD/DNS state
LDAP session security settings and requirements after ADV190023
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Learn about upgrading your domain and forest functional levels in Active Directory Domain Services. in observed AD/DNS state
Learn about upgrading your domain and forest functional levels in Active Directory Domain Services.
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Manage certificate templates in Windows Server in observed AD/DNS state
Manage certificate templates in Windows Server
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Microsoft accounts in observed AD/DNS state
Microsoft accounts
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Monitoring Active Directory for Signs of Compromise in observed AD/DNS state
Monitoring Active Directory for Signs of Compromise
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope New sessions setup for LDAP services takes longer than expected if targeting host names in observed AD/DNS state
New sessions setup for LDAP services takes longer than expected if targeting host names
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope NTDS replication warning IDs 1083 and 1061 in observed AD/DNS state
NTDS replication warning IDs 1083 and 1061
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Phantoms, tombstones, and the infrastructure master in observed AD/DNS state
Phantoms, tombstones, and the infrastructure master
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Prevent domain controllers from dynamically registering DNS names in observed AD/DNS state
Prevent domain controllers from dynamically registering DNS names
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Prevent KCC from creating replication topology in observed AD/DNS state
Prevent KCC from creating replication topology
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Redirect users and computers containers in observed AD/DNS state
Redirect users and computers containers
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Request Certificates Using Web Enrollment in Active Directory Certificate Services in observed AD/DNS state
Request Certificates Using Web Enrollment in Active Directory Certificate Services
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope RODC replicates passwords of all users incorrectly in Windows Server in observed AD/DNS state
RODC replicates passwords of all users incorrectly in Windows Server
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Secure DNS Client over HTTPS (DoH) on Windows Server 2022 in observed AD/DNS state
Secure DNS Client over HTTPS (DoH) on Windows Server 2022
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Set up Windows LAPS in the LAPS properties dialog in observed AD/DNS state
Set up Windows LAPS in the LAPS properties dialog
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Sign DNS Zones with DNSSEC on Windows Server in observed AD/DNS state
Sign DNS Zones with DNSSEC on Windows Server
Publication date not specified · DSE reviewed August 27, 2026
ChecklistImportant
Scope SMB encryption by share, server, or client mandate—and test the rejection path
SMB security enhancements
Publication date not specified · DSE reviewed August 25, 2026
BriefingAdvisory
Scope Specify a server name and port number for an Active Directory cmdlet in observed AD/DNS state
Specify a server name and port number for an Active Directory cmdlet
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Support boundary for high accuracy time in observed AD/DNS state
Support boundary for high accuracy time
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Transfer Flexible Single Master Operations roles in Windows Server in observed AD/DNS state
Transfer Flexible Single Master Operations roles in Windows Server
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Troubleshoot AD FS 2.0 error (Access is denied) in observed AD/DNS state
Troubleshoot AD FS 2.0 error (Access is denied)
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Troubleshoot AD Replication error 8240 There is no such object on the server in observed AD/DNS state
Troubleshoot AD Replication error 8240 There is no such object on the server
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Troubleshoot AD replication error 8589 in observed AD/DNS state
Troubleshoot AD replication error 8589
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Troubleshoot DNS name resolution on the Internet in observed AD/DNS state
Troubleshoot DNS name resolution on the Internet
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Use DNS Policy for Geo-Location Based Traffic Management with Primary Servers in observed AD/DNS state
Use DNS Policy for Geo-Location Based Traffic Management with Primary Servers
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope Verify that SRV Domain Name System (DNS) records have been created in observed AD/DNS state
Verify that SRV Domain Name System (DNS) records have been created
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope View and set Lightweight Directory Access Protocol (LDAP) policy with Ntdsutil in observed AD/DNS state
View and set Lightweight Directory Access Protocol (LDAP) policy with Ntdsutil
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Scope w32tm /resync command fails with "The computer didn't resync because no time data was available." in observed AD/DNS state
w32tm /resync command fails with "The computer didn't resync because no time data was available."
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Seal Bicep input objects when extra properties must fail validation
User-defined types in Bicep - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingAdvisory
Search-ADAccount: search adaccount under AD/DNS change control
Search-ADAccount
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Secure both File Sync resources before closing their public paths
Configure Azure File Sync network endpoints | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Secure the Apple Activation Lock bypass before wiping a returned device
Device Action: Disable Activation Lock - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Select a supported Hyper-V GPU partition count
Partition and assign GPUs to a virtual machine in Hyper-V
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Select NFS authentication before creating a Windows file share
Deploy Network File System
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Select the editor's cloud before deploying Bicep from Visual Studio Code
Create Bicep files with Visual Studio Code - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Select the SDN scenario before starting automated data-path diagnostics
SDN Data Path Diagnostics Extension in Windows Admin Center
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Separate a cluster set’s management plane from its member workloads
Deploy a cluster set for Windows Server Failover Clusters
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Separate a local cloud-app score override from a catalog correction request
Cloud app catalog and risk scores - Microsoft Defender for Cloud Apps | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Separate an awaited operation from a physically blocked thread in a .NET profile
View .NET Profiler trace data - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate analyst permissions from Sentinel's incident-playbook authority
Automate and run Microsoft Sentinel playbooks | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate Azure Monitor workspace quota growth from ingestion-endpoint limits
Best practices for scaling Azure Monitor Workspaces with Azure Monitor managed service for Prometheus - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate Bastion shareable-link access from target-machine credentials
Create a shareable link for Azure Bastion | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate battery wear from workload-driven drain before replacement
Battery Health Report in Endpoint Analytics - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistAdvisory
Separate BitLocker self-recovery from helpdesk recovery
BitLocker recovery process
Published July 29, 2025 · DSE reviewed August 26, 2026
GuideInformation
Separate BYOIP provisioning from public route advertisement
Create a custom IPv4 address prefix in Azure - Azure Virtual Network | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate cluster creator permissions from clustered-role object creation
Prestage cluster computer objects in Active Directory Domain Services
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Separate Configuration Manager analytics collection from cloud upload
Configure Endpoint Analytics - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate cross-subscription Bicep references from deployments
Use Bicep to deploy resources to subscription - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingAdvisory
Separate Defender for Identity directory reads from remediation permissions
Directory Service Accounts for Microsoft Defender for Identity
Published January 16, 2024 · DSE reviewed August 26, 2026
GuideInformation
Separate delivery IDs from maintenance event IDs in the Scheduled Events preview
Scheduled Events - Event Grid - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate DHCP migration preparation, transfer, and acceptance
Migrate DHCP server to Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Separate DHCP role installation from authorization and scope readiness
Install and configure DHCP Server on Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Separate durable HPC storage from the layer that accelerates a job
Azure HPC workload best practices guide - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate Elastic SAN capacity expansion from performance expansion
Learn about Azure Elastic SAN and VM performance | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate Elastic SAN private-endpoint creation authority from connection approval
Configure private endpoints for Azure Elastic SAN | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate expired threat indicators from current action candidates in Defender threat analytics
Threat analytics in Microsoft Defender - Microsoft Defender XDR | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Separate extension install-time version selection from ongoing Azure upgrades
Automatic Extension Upgrade for VMs and scale sets in Azure - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate File Sync tiering exclusions from immediate local recall
How to manage Azure File Sync tiered files | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate Firewall Policy edit availability from continued firewall operation
Azure Firewall Manager policy overview | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate Hyper-V root and guest responsibilities when tracing device access
Hyper-v Architecture
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Separate Hyper-V startup memory from the post-start minimum
Dynamic Memory for Hyper-V Virtual Machines
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Separate incremental DDoS reports from the completed mitigation summary
Tutorial: View Azure DDoS Protection logs in Log Analytics workspace | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistInformation
Separate independent monitoring consumers before sharing an Event Hubs export
Stream Azure monitoring data to an event hub and external partners - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingAdvisory
Separate internal and external answers with AD-integrated split-brain DNS policy
Use DNS Policy for Split-Brain DNS in Active Directory
Published July 29, 2021 · DSE reviewed August 26, 2026
GuideInformation
Separate Load Balancer data-path health from application availability
Load Balancer Diagnostics - Azure Load Balancer | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate Machine Configuration service access from custom package access
Azure Machine Configuration network requirements - Azure Machine Configuration | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingAdvisory
Separate metric progress from weight in the Identity Security Initiative
Identity Security Initiative
Published April 5, 2025 · DSE reviewed August 26, 2026
GuideInformation
Separate new-child inheritance from existing Data Lake ACL remediation
Access control lists (ACLs) in Azure Data Lake Storage - Azure Storage | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Separate original and current device impact in the vulnerability event timeline
Event timeline - Microsoft Defender Vulnerability Management | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate pausing a Cloud PKI issuer from permanently retiring it
Delete issued PKI certificates with Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate permitted Bicep array values from the number of required selections
Parameters in Bicep files - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate PKCS template export permission from the installed device key
Use a PKCS certificate profile to provision devices with certificates in Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate pre-logon device VPN from user VPN requirements
Configure the VPN device tunnel in Windows client
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Separate Queue Storage data permission from Azure portal navigation
Authorize access to queues using Active Directory - Azure Storage | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate RADIUS proxy forwarding from user authorization
Plan NPS as a RADIUS proxy
Publication date not specified · DSE reviewed September 8, 2026
ExplainerInformation
Separate requester, writer, and provider roles when reviewing VSS backups
Volume Shadow Copy Service (VSS)
Publication date not specified · DSE reviewed September 8, 2026
BriefingInformation
Separate scheduled default-branch scans from a pull-request release gate
Configure agentless code scanning (Preview) - Microsoft Defender for Cloud | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate SDN gateway capacity from tunnel throughput limits
Gateway bandwidth allocation
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Separate service and client evidence in Intune feature-update reports
Reports for Windows Feature Update Policies - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate Service Fabric container health reporting from automatic restart
Create an Azure Service Fabric container application - Azure Service Fabric | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate shielded-VM provisioning completion from guest specialization
Create a shielded VM using PowerShell
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Separate stopping NetApp cool tiering from retrieving already cooled data
Manage Azure NetApp Files storage with cool access | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate Store app access restrictions from automatic UWP updates
Add Microsoft Store Apps to Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Separate text-log record boundaries from the timestamp stored in Log Analytics
Collect text file from virtual machine with Azure Monitor - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate Windows Admin Center gateway sign-in from server access
User access options with Windows Admin Center
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Separate Windows Admin Center gateway users from gateway administrators
Configuring user access control and permissions
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Separate Windows enrollment classification from lasting Intune ownership
Add corporate identifiers to Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Separate Work Folders client lab assumptions from deployment settings
Deploy Work Folders with AD FS and Web Application Proxy - Step 5, Set Up Clients
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Separate workload identity from the attestation decision that releases an asset key
Protect intellectual property on Azure VMs with attestation-gated Secure Key Release - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Set a new management group's parent explicitly in a management-group Bicep deployment
Use Bicep to deploy resources to management group - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Set LAPS password or passphrase policy from measured entropy
Windows LAPS passwords and passphrases
Published May 12, 2025 · DSE reviewed August 26, 2026
GuideInformation
Set send and receive limits independently on an SDN VM adapter
Configure Quality of Service (QoS) for a VM network adapter
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Set SMB dialect ranges separately for client and server roles
Manage SMB dialects in Windows and Windows Server 2025
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Set Storage QoS goals in the units the policy actually uses
Storage Quality of Service
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Set the destination and initial copy for Hyper-V Replica
Replicate a virtual machine with Hyper-V Replica
Publication date not specified · DSE reviewed September 8, 2026
ChecklistAdvisory
Set the guest-invitation boundary before external collaboration expands
Configure external collaboration settings for B2B in Microsoft Entra External ID
Publication date not specified · DSE reviewed August 25, 2026
GuideAdvisory
Set-ADAccountAuthenticationPolicySilo: change adaccount authentication policy silo with before-and-after evidence
Set-ADAccountAuthenticationPolicySilo
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Set-ADAccountControl: change adaccount control against recorded identity and DNS state
Set-ADAccountControl
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Set-ADAccountExpiration: change adaccount expiration with bounded evidence
Set-ADAccountExpiration
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Set-ADAccountPassword: change adaccount password under AD/DNS change control
Set-ADAccountPassword
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Set-ADAuthenticationPolicy: change adauthentication policy under AD/DNS change control
Set-ADAuthenticationPolicy
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Set-ADAuthenticationPolicySilo: change adauthentication policy silo with rollback checks
Set-ADAuthenticationPolicySilo
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Set-ADCentralAccessPolicy: change adcentral access policy under AD/DNS change control
Set-ADCentralAccessPolicy
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Set-ADClaimTransformPolicy: change adclaim transform policy with before-and-after evidence
Set-ADClaimTransformPolicy
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Set-ADClaimType: change adclaim type with bounded evidence
Set-ADClaimType
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Set-ADComputer: change adcomputer with before-and-after evidence
Set-ADComputer
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Set-ADDefaultDomainPasswordPolicy: change addefault domain password policy with bounded evidence
Set-ADDefaultDomainPasswordPolicy
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Set-ADDomain: change addomain with before-and-after evidence
Set-ADDomain
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Set-ADDomainMode: change addomain mode with rollback checks
Set-ADDomainMode
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Set-ADFineGrainedPasswordPolicy: change adfine grained password policy with before-and-after evidence
Set-ADFineGrainedPasswordPolicy
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Set-ADForest: change adforest with before-and-after evidence
Set-ADForest
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Set-ADGroup: change adgroup under AD/DNS change control
Set-ADGroup
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Set-ADObject: change adobject against recorded identity and DNS state
Set-ADObject
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Set-ADOrganizationalUnit: change adorganizational unit with before-and-after evidence
Set-ADOrganizationalUnit
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Set-ADReplicationConnection: change adreplication connection with before-and-after evidence
Set-ADReplicationConnection
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Set-ADReplicationSite: change adreplication site with bounded evidence
Set-ADReplicationSite
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Set-ADReplicationSiteLink: change adreplication site link against recorded identity and DNS state
Set-ADReplicationSiteLink
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Set-ADReplicationSiteLinkBridge: change adreplication site link bridge under AD/DNS change control
Set-ADReplicationSiteLinkBridge
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Set-ADResourceProperty: change adresource property with rollback checks
Set-ADResourceProperty
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Set-ADServiceAccount: change adservice account with rollback checks
Set-ADServiceAccount
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Set-ADUser: change aduser with rollback checks
Set-ADUser
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Set-DnsServer: change dns server with before-and-after evidence
Set-DnsServer
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Set-DnsServerCache: change dns server cache under AD/DNS change control
Set-DnsServerCache
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Set-DnsServerClientSubnet: change dns server client subnet with bounded evidence
Set-DnsServerClientSubnet
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Set-DnsServerConditionalForwarderZone: change dns server conditional forwarder zone with bounded evidence
Set-DnsServerConditionalForwarderZone
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Set-DnsServerDiagnostics: change dns server diagnostics against recorded identity and DNS state
Set-DnsServerDiagnostics
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Set-DnsServerDnsSecZoneSetting: change dns server dns sec zone setting against recorded identity and DNS state
Set-DnsServerDnsSecZoneSetting
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Set-DnsServerDsSetting: change dns server ds setting with bounded evidence
Set-DnsServerDsSetting
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Set-DnsServerEDns: change dns server edns with rollback checks
Set-DnsServerEDns
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Set-DnsServerGlobalNameZone: change dns server global name zone under AD/DNS change control
Set-DnsServerGlobalNameZone
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Set-DnsServerGlobalQueryBlockList: change dns server global query block list with bounded evidence
Set-DnsServerGlobalQueryBlockList
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Set-DnsServerPrimaryZone: change dns server primary zone with before-and-after evidence
Set-DnsServerPrimaryZone
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Set-DnsServerQueryResolutionPolicy: change dns server query resolution policy with rollback checks
Set-DnsServerQueryResolutionPolicy
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Set-DnsServerRecursion: change dns server recursion against recorded identity and DNS state
Set-DnsServerRecursion
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Set-DnsServerRecursionScope: change dns server recursion scope with before-and-after evidence
Set-DnsServerRecursionScope
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Set-DnsServerResponseRateLimiting: change dns server response rate limiting with rollback checks
Set-DnsServerResponseRateLimiting
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Set-DnsServerStubZone: change dns server stub zone with rollback checks
Set-DnsServerStubZone
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Set-DnsServerVirtualizationInstance: change dns server virtualization instance with before-and-after evidence
Set-DnsServerVirtualizationInstance
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Set-DnsServerZoneAging: change dns server zone aging under AD/DNS change control
Set-DnsServerZoneAging
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Set-DnsServerZoneTransferPolicy: change dns server zone transfer policy with rollback checks
Set-DnsServerZoneTransferPolicy
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
SharePoint and OneDrive external sharing: reduce exposure without stopping collaboration
Microsoft Learn: External sharing in SharePoint and OneDrive
Publication date not specified · DSE reviewed July 19, 2026
BriefingAdvisory
Show an internal recovery path on BitLocker preboot screens
BitLocker preboot recovery screen
Published August 24, 2026 · DSE reviewed August 26, 2026
PlaybookAdvisory
Show-DnsServerCache: show dns server cache with bounded evidence
Show-DnsServerCache
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Show-DnsServerKeyStorageProvider: show dns server key storage provider with before-and-after evidence
Show-DnsServerKeyStorageProvider
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Simulate Purview DLP before enforcing user-impacting actions
Get started with data loss prevention simulation mode
Publication date not specified · DSE reviewed August 25, 2026
GuideInformation
Size an MPI transport experiment by connection count, not node count alone
Scaling HPC applications - Azure Virtual Machines - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Size Defender for Identity sensor v2 separately from sensor v3
Plan capacity for Microsoft Defender for Identity deployment
Published July 2, 2026 · DSE reviewed August 26, 2026
GuideInformation
Size RAS gateway standby pools as an explicit availability decision
RAS Gateway High Availability
Publication date not specified · DSE reviewed September 8, 2026
GuideAdvisory
SPF, DKIM, and DMARC: a safer rollout for Microsoft 365 email
Microsoft Learn: Email authentication in Microsoft 365
Publication date not specified · DSE reviewed July 19, 2026
GuideInformation
Split AGIC ingress resources when backend path prefixes must differ
Application Gateway Ingress Controller annotations | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Staff the EPM approval queue before requiring support-approved elevation
Use EPM support approvals for file elevation requests with Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerAdvisory
Stage 0xc00002e1 error when you start your Windows-based domain controller with AD/DNS rollback checks
0xc00002e1 error when you start your Windows-based domain controller
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage A newly promoted domain controller may fail to advertise after completion of DCpromo with AD/DNS rollback checks
A newly promoted domain controller may fail to advertise after completion of DCpromo
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Abandoned objects block replication for Global Catalog naming contexts with AD/DNS rollback checks
Abandoned objects block replication for Global Catalog naming contexts
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage about_ActiveDirectory_ObjectModel with AD/DNS rollback checks
about_ActiveDirectory_ObjectModel
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Access is denied error occurs with DCPROMO with AD/DNS rollback checks
Access is denied error occurs with DCPROMO
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Account-identifier allocator fails to initialize with AD/DNS rollback checks
Account-identifier allocator fails to initialize
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Active Directory installation fails with AD/DNS rollback checks
Active Directory installation fails
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Active Directory replication error 8453 with AD/DNS rollback checks
Active Directory replication error 8453
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage AD Forest Recovery - Remove the global catalog with AD/DNS rollback checks
AD Forest Recovery - Remove the global catalog
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage AD LDS instance logs Event ID 2092 with AD/DNS rollback checks
AD LDS instance logs Event ID 2092
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage AD-integrated DNS zone serial No. behavior with AD/DNS rollback checks
AD-integrated DNS zone serial No. behavior
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage ADFS 2.0 error 401 with AD/DNS rollback checks
ADFS 2.0 error 401
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Best Practices for Active Directory Domains that Use Single-label DNS Names with AD/DNS rollback checks
Best Practices for Active Directory Domains that Use Single-label DNS Names
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage CA Backup and Restore Windows PowerShell cmdlets with AD/DNS rollback checks
CA Backup and Restore Windows PowerShell cmdlets
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Certification Authority Web Enrollment with AD/DNS rollback checks
Certification Authority Web Enrollment
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Change AD FS 2.0 service communications with AD/DNS rollback checks
Change AD FS 2.0 service communications
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Configure certificate templates for ML-DSA in Windows Server with AD/DNS rollback checks
Configure certificate templates for ML-DSA in Windows Server
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Configure firewall for AD domain and trusts with AD/DNS rollback checks
Configure firewall for AD domain and trusts
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Database 32k pages for Active Directory on Windows Server with AD/DNS rollback checks
Database 32k pages for Active Directory on Windows Server
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage DC promotion stops responding with AD/DNS rollback checks
DC promotion stops responding
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Demote Domain Controllers and Domains with AD/DNS rollback checks
Demote Domain Controllers and Domains
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Description of the netmask ordering feature and the round robin feature with AD/DNS rollback checks
Description of the netmask ordering feature and the round robin feature
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Determining the Number of Forests Required with AD/DNS rollback checks
Determining the Number of Forests Required
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage DNS zones don't load with event 4000 and 4007 with AD/DNS rollback checks
DNS zones don't load with event 4000 and 4007
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Duplicate Active Directory replication connections are created with AD/DNS rollback checks
Duplicate Active Directory replication connections are created
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Enable DNS over HTTPS in DNS Server on Windows Server with AD/DNS rollback checks
Enable DNS over HTTPS in DNS Server on Windows Server
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Error 0x5 Access Denied When You Rename a Computer That Is a Member of a Domain with AD/DNS rollback checks
Error 0x5 Access Denied When You Rename a Computer That Is a Member of a Domain
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Event ID 1644 when LDAP queries are run with AD/DNS rollback checks
Event ID 1644 when LDAP queries are run
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Failure When You Use an Existing Computer Account to Join a Domain with AD/DNS rollback checks
Failure When You Use an Existing Computer Account to Join a Domain
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Flexible Single Master Operations roles in Windows Server with AD/DNS rollback checks
Flexible Single Master Operations roles in Windows Server
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Forwarded DNS name resolution fails for dual-stacked queries with AD/DNS rollback checks
Forwarded DNS name resolution fails for dual-stacked queries
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Get started with Windows LAPS in legacy Microsoft LAPS emulation mode with AD/DNS rollback checks
Get started with Windows LAPS in legacy Microsoft LAPS emulation mode
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Group Managed Service Accounts with AD/DNS rollback checks
Group Managed Service Accounts overview
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Group policy application rules for domain controllers with AD/DNS rollback checks
Group policy application rules for domain controllers
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Guidance about how to configure protected accounts with AD/DNS rollback checks
Guidance about how to configure protected accounts
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Guidance for troubleshooting Active Directory replication with AD/DNS rollback checks
Guidance for troubleshooting Active Directory replication
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Host AD DCs in virtual hosting environments with AD/DNS rollback checks
Host AD DCs in virtual hosting environments
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Host's A record is registered in DNS with AD/DNS rollback checks
Host's A record is registered in DNS
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage How to configure Kerberos Constrained Delegation for Web Enrollment proxy pages with AD/DNS rollback checks
How to configure Kerberos Constrained Delegation for Web Enrollment proxy pages
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage How to create and apply a custom application directory partition on an Active Directory integrated DNS zone
How to create and apply a custom application directory partition on an Active Directory integrated DNS zone
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage How to detect and recover from a USN rollback in a Windows Server-based domain controller with AD/DNS rollback checks
How to detect and recover from a USN rollback in a Windows Server-based domain controller
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage How to raise Active Directory domain and forest functional levels with AD/DNS rollback checks
How to raise Active Directory domain and forest functional levels
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage How to Turn on Debug Logging of the LDAP Client (Wldap32.dll) with AD/DNS rollback checks
How to Turn on Debug Logging of the LDAP Client (Wldap32.dll)
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Install a policy module with the Network Device Enrollment Service in Windows Server with AD/DNS rollback checks
Install a policy module with the Network Device Enrollment Service in Windows Server
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Install a Replica Windows Server 2012 Domain Controller in an Existing Domain (Level 200) with AD/DNS rollback checks
Install a Replica Windows Server 2012 Domain Controller in an Existing Domain (Level 200)
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Lingering objects in an AD DS forest with AD/DNS rollback checks
Lingering objects in an AD DS forest
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Locating Active Directory Domain Controllers in Windows and Windows Server with AD/DNS rollback checks
Locating Active Directory Domain Controllers in Windows and Windows Server
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Maintaining a More Secure Environment with AD/DNS rollback checks
Maintaining a More Secure Environment
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Manually Remove Lingering Objects on Outdated Replication Partners with AD/DNS rollback checks
Manually Remove Lingering Objects on Outdated Replication Partners
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Overview of Active Directory Domain Services with AD/DNS rollback checks
Overview of Active Directory Domain Services
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Remote procedure call failed and did not execute error with AD/DNS rollback checks
Remote procedure call failed and did not execute error
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Selecting the Forest Root Domain with AD/DNS rollback checks
Selecting the Forest Root Domain
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Target Principal Name is incorrect when manually replicating data between domain controllers with AD/DNS rollback checks
Target Principal Name is incorrect when manually replicating data between domain controllers
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Time service does not correct the time with AD/DNS rollback checks
Time service does not correct the time
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Troubleshoot authentication failures with Group Managed Service Accounts (gMSA) with AD/DNS rollback checks
Troubleshoot authentication failures with Group Managed Service Accounts (gMSA)
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Troubleshooting AD Replication error 8477 with AD/DNS rollback checks
Troubleshooting AD Replication error 8477
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Turn on debug logging in Windows Time Service with AD/DNS rollback checks
Turn on debug logging in Windows Time Service
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Unable to select DNS Server role when adding a domain controller into an existing Active Directory domain
Unable to select DNS Server role when adding a domain controller into an existing Active Directory domain
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Validate and secure DNS responses using DNSSEC on DNS Server in Windows Server with AD/DNS rollback checks
Validate and secure DNS responses using DNSSEC on DNS Server in Windows Server
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Verify DNS Functionality to Support Directory Replication with AD/DNS rollback checks
Verify DNS Functionality to Support Directory Replication
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Virtualized Domain Controller Cloning Test Guidance for Application Vendors with AD/DNS rollback checks
Virtualized Domain Controller Cloning Test Guidance for Application Vendors
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Virtualizing domain controllers with Hyper-V with AD/DNS rollback checks
Virtualizing domain controllers with Hyper-V
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage What is DNSSEC on DNS Server in Windows Server? with AD/DNS rollback checks
What is DNSSEC on DNS Server in Windows Server?
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Stage Windows DNS registers duplicate SRV records for a DC if its computer name has uppercase letters with AD/DNS rollback checks
Windows DNS registers duplicate SRV records for a DC if its computer name has uppercase letters
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Start Jamf device registration from Self Service, not Company Portal
Jamf Managed Device Compliance with Microsoft Entra ID - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Start virtualized domain-controller clone troubleshooting with built-in logs
Virtualized Domain Controller Troubleshooting
Published May 12, 2025 · DSE reviewed August 26, 2026
PlaybookAdvisory
Start-DnsServerScavenging: start dns server scavenging with bounded evidence
Start-DnsServerScavenging
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Start-DnsServerZoneTransfer: start dns server zone transfer against recorded identity and DNS state
Start-DnsServerZoneTransfer
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Step-DnsServerSigningKeyRollover: step dns server signing key rollover under AD/DNS change control
Step-DnsServerSigningKeyRollover
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Supply each forced-tunnel Virtual WAN hub with its own default-route source
Securing Internet access with routing intent - Azure Virtual WAN | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Supply the principal type when a just-created identity's Azure role assignment races replication
Assign Azure roles using Azure CLI - Azure RBAC | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Suspend-DnsServerZone: suspend dns server zone with bounded evidence
Suspend-DnsServerZone
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Sync-DnsServerZone: synchronize dns server zone against recorded identity and DNS state
Sync-DnsServerZone
Publication date not specified · DSE reviewed August 27, 2026
GuideImportant
Synchronize only necessary users and attributes across Entra tenants
What is cross-tenant synchronization?
Publication date not specified · DSE reviewed August 25, 2026
GuideInformation
Target the correct AVD user when starting Remote Help
Using Remote Help on Windows to Assist Authenticated Users - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Test a new RDS session after disabling automatic reconnection
Disable Automatic Reconnection in Remote Desktop Service for Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Test a Storage request before declaring its minimum TLS policy ineffective
Enforce a Minimum Required Version of Transport Layer Security (TLS) - Azure Storage | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Test Azure Policy evaluation while enforcement is disabled
Design Azure Policy as Code workflows - Azure Policy | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Test Azure storage bursts after credit exhaustion, not only at startup
Managed disk bursting - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Test boot-diagnostics capture separately from an operator's ability to view it
Azure boot diagnostics - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistAdvisory
Test Defender for Identity cloud connectivity before and after sensor deployment
Test Microsoft Defender for Identity connectivity
Published July 2, 2026 · DSE reviewed August 26, 2026
GuideInformation
Test established TCP sessions separately from new connections during Azure live migration
Maintenance and updates - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Test every output channel in an Intune Win32 detection script
Add and Assign Win32 Apps to Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Test iOS app sign-in at the incoming-data boundary
Add App Configuration Policies for Managed iOS/iPadOS Devices - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookImportant
Test Microsoft 365 recovery with the mechanisms actually available
Microsoft Learn: Overview of Microsoft 365 Backup
Published July 6, 2026 · DSE reviewed July 28, 2026
GuideInformation
Test multi-flow session affinity before evaluating Virtual WAN NVA DNAT
Azure Virtual WAN: Configure Destination NAT for Network Virtual Appliance (NVA) in the hub | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Test resource-context access before trusting Log Analytics row conditions
Granular RBAC - Azure Monitor Log Analytics | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistImportant
Test Safe Attachments precedence and delivery behavior before custom rollout
Set up Safe Attachments policies in Microsoft Defender for Office 365
Publication date not specified · DSE reviewed August 25, 2026
GuideInformation
Test ServiceNow incident access with the actual Intune helpdesk operator
ServiceNow integration with Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Test Shared iPad guest sessions without assuming user-targeted policy applies
Shared iPad devices - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Test the staged Cloud PKI issuer before activating renewal
Renew a Certificate Authority in Cloud PKI - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistAdvisory
Test-DnsServer: test dns server with rollback checks
Test-DnsServer
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Active Directory Forest Recovery - Perform initial recovery across Active Directory and Windows DNS
Active Directory Forest Recovery - Perform initial recovery
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Active Directory LDAP client performance counters in Windows Server across Active Directory and Windows DNS
Active Directory LDAP client performance counters in Windows Server
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Active Directory Replication Error 1127 across Active Directory and Windows DNS
Active Directory Replication Error 1127
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Active Directory replication Event ID 1388 or 1988 - A lingering object is detected across Active Directory and Windows DNS
Active Directory replication Event ID 1388 or 1988 - A lingering object is detected
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Active Directory replication Event ID 1925 attempt to establish a replication link failed due to DNS lookup problem
Active Directory replication Event ID 1925 attempt to establish a replication link failed due to DNS lookup problem
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace AD DS Design and Planning across Active Directory and Windows DNS
AD DS Design and Planning
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace AD replication isn't working with event 1865 logged across Active Directory and Windows DNS
AD replication isn't working with event 1865 logged
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Appendix L - Events to Monitor across Active Directory and Windows DNS
Appendix L - Events to Monitor
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Can't promote a domain controller to a global catalog server across Active Directory and Windows DNS
Can't promote a domain controller to a global catalog server
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Cannot connect to Internet or domain across Active Directory and Windows DNS
Cannot connect to Internet or domain
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Configure DNS aging and scavenging in Windows Server across Active Directory and Windows DNS
Configure DNS aging and scavenging in Windows Server
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Configure Network Device Enrollment Service to use a domain user account for Active Directory Certificate Services
Configure Network Device Enrollment Service to use a domain user account for Active Directory Certificate Services
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Configure W32Time against huge time offset across Active Directory and Windows DNS
Configure W32Time against huge time offset
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Creating a DNS Infrastructure Design across Active Directory and Windows DNS
Creating a DNS Infrastructure Design
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Database garbage collection process across Active Directory and Windows DNS
Database garbage collection process
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Delegating Administration of Default Containers and OUs across Active Directory and Windows DNS
Delegating Administration of Default Containers and OUs
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace DNS server loses its NIC Teaming configuration across Active Directory and Windows DNS
DNS server loses its NIC Teaming configuration
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace DNS WINS Lookup Integration in Windows Server across Active Directory and Windows DNS
DNS WINS Lookup Integration in Windows Server
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace DNS zone transfer options are unexpectedly reset across Active Directory and Windows DNS
DNS zone transfer options are unexpectedly reset
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace DnsServer across Active Directory and Windows DNS
DnsServer
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Enable or disable DNS updates across Active Directory and Windows DNS
Enable or disable DNS updates
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Errors when you run DCDIAG commands across Active Directory and Windows DNS
Errors when you run DCDIAG commands
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Event 142 time service stopped advertising across Active Directory and Windows DNS
Event 142 time service stopped advertising
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Event ID 4015 - The DNS server encountered a critical error across Active Directory and Windows DNS
Event ID 4015 - The DNS server encountered a critical error
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Event IDs 5788 and 5789 occur across Active Directory and Windows DNS
Event IDs 5788 and 5789 occur
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace excessive SAM traffic back to the client process
Enable SAM Client Event Logging in Windows
Published July 16, 2026 · DSE reviewed August 26, 2026
ChecklistAdvisory
Trace gMSA password-read failures to the domain controller's retrieval rights
Troubleshooting Microsoft Defender for Identity known issues
Published February 4, 2026 · DSE reviewed August 26, 2026
ExplainerAdvisory
Trace Group Policy processing order before declaring drift
Group Policy processing for Windows
Published June 16, 2025 · DSE reviewed August 26, 2026
GuideInformation
Trace how NPS interprets and rewrites a user realm
Realm Names
Publication date not specified · DSE reviewed September 8, 2026
GuideAdvisory
Trace How to create an Active Directory server in Windows Server 2003 across Active Directory and Windows DNS
How to create an Active Directory server in Windows Server 2003
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Identifying the Deployment Project Participants across Active Directory and Windows DNS
Identifying the Deployment Project Participants
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Install a Windows Server 2012 Active Directory Read-Only Domain Controller (RODC) (Level 200)
Install a Windows Server 2012 Active Directory Read-Only Domain Controller (RODC) (Level 200)
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Installing AD DS fails across Active Directory and Windows DNS
Installing AD DS fails
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Integrating AD DS into an Existing DNS Infrastructure across Active Directory and Windows DNS
Integrating AD DS into an Existing DNS Infrastructure
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Introduction to Active Directory Replication and Topology Management Using Windows PowerShell (Level 100)
Introduction to Active Directory Replication and Topology Management Using Windows PowerShell (Level 100)
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace KFSO doesn't work in external trust across Active Directory and Windows DNS
KFSO doesn't work in external trust
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace LDAP and Kerberos Server not respond to UDP requests or reset TCP sessions across Active Directory and Windows DNS
LDAP and Kerberos Server not respond to UDP requests or reset TCP sessions
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Trace legacy SMB failures to the device that still requires SMBv1
SMBv1 Not Installed by Default in Windows Server and Windows
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Trace local and forwarded requests through ordered NPS policies
Connection Request Policies
Publication date not specified · DSE reviewed September 8, 2026
GuideAdvisory
Trace Mapping Design Requirements to Forest Design Models across Active Directory and Windows DNS
Mapping Design Requirements to Forest Design Models
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Microsoft Exchange compatibility with Single Label Domains, Disjointed Namespaces, and Discontiguous Namespaces
Microsoft Exchange compatibility with Single Label Domains, Disjointed Namespaces, and Discontiguous Namespaces
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Name computers, domains, sites, and OUs across Active Directory and Windows DNS
Name computers, domains, sites, and OUs
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace NET ADD doesn't support names exceeding 20 characters across Active Directory and Windows DNS
NET ADD doesn't support names exceeding 20 characters
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace NTDS Replication Event 2089 is logged across Active Directory and Windows DNS
NTDS Replication Event 2089 is logged
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Offline defragmentation of Active Directory database across Active Directory and Windows DNS
Offline defragmentation of Active Directory database
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Orphaned child domain controller isn't replicated across Active Directory and Windows DNS
Orphaned child domain controller isn't replicated
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Performance issues after you upgrade DCs across Active Directory and Windows DNS
Performance issues after you upgrade DCs
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Reducing the Active Directory Attack Surface across Active Directory and Windows DNS
Reducing the Active Directory Attack Surface
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Relocate a SYSVOL tree across Active Directory and Windows DNS
Relocate a SYSVOL tree
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Restore IIS and clean up Active Directory when you uninstall AD FS 2.0 across Active Directory and Windows DNS
Restore IIS and clean up Active Directory when you uninstall AD FS 2.0
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Secure Time Seeding Recommendations for Windows Server across Active Directory and Windows DNS
Secure Time Seeding Recommendations for Windows Server
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Securing Domain Controllers Against Attack across Active Directory and Windows DNS
Securing Domain Controllers Against Attack
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Site functions across Active Directory and Windows DNS
Site functions
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Some DNS name queries are unsuccessful across Active Directory and Windows DNS
Some DNS name queries are unsuccessful
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Submit certificate requests to AD CS using a PKCS #10 or PKCS #7 file in Windows Server across Active Directory and Windows DNS
Submit certificate requests to AD CS using a PKCS #10 or PKCS #7 file in Windows Server
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Trace the Azure source-address requirement when RHEL updates fail through a central proxy
Red Hat Update Infrastructure - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Trace The NETLOGON share is not present
The NETLOGON share is not present after you install Active Directory Domain Services on a new full or read-only Windows Server 2008-based domain controller
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Trace the provider named in an Azure deployment registration error
Resource provider registration errors - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerAdvisory
Trace the Windows LAPS policy-processing and backup flow
Windows LAPS architecture
Published May 12, 2025 · DSE reviewed August 26, 2026
GuideAdvisory
Trace This page can't be displayed across Active Directory and Windows DNS
This page can't be displayed
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Troubleshoot DNS over HTTPS in DNS Server on Windows Server across Active Directory and Windows DNS
Troubleshoot DNS over HTTPS in DNS Server on Windows Server
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Troubleshoot multiple records being registered with the same IP address across Active Directory and Windows DNS
Troubleshoot multiple records being registered with the same IP address
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Troubleshoot Networking Errors When Joining Windows-based Computers to a Domain across Active Directory and Windows DNS
Troubleshoot Networking Errors When Joining Windows-based Computers to a Domain
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Troubleshoot replication error 8606 across Active Directory and Windows DNS
Troubleshoot replication error 8606
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Trace unexpected Queue CLI throttling to implicit account-key retrieval
Choose how to authorize access to queue data with Azure CLI - Azure Storage | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Trace Upgrade domain controllers to a newer version of Windows Server across Active Directory and Windows DNS
Upgrade domain controllers to a newer version of Windows Server
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Use a policy module with Network Device Enrollment Service across Active Directory and Windows DNS
Use a policy module with Network Device Enrollment Service
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Use Directory Service to manage AD objects across Active Directory and Windows DNS
Use Directory Service to manage AD objects
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Use DNS Policy for Application Load Balancing across Active Directory and Windows DNS
Use DNS Policy for Application Load Balancing
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Use Event1644Reader.ps1 to analyze LDAP query performance across Active Directory and Windows DNS
Use Event1644Reader.ps1 to analyze LDAP query performance
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace UserAccountControl property flags across Active Directory and Windows DNS
UserAccountControl property flags
Publication date not specified · DSE reviewed August 27, 2026
GuideAdvisory
Trace Using the Organizational Domain Forest Model across Active Directory and Windows DNS
Using the Organizational Domain Forest Model
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Trace Windows authorization from principal to access token
Security Principals
Published July 8, 2025 · DSE reviewed August 26, 2026
ChecklistAdvisory
Trace Windows DNS recursive and iterative query paths separately
DNS Queries and Lookups in Windows and Windows Server
Published March 24, 2025 · DSE reviewed August 26, 2026
ExplainerAdvisory
Trace Windows IPv4 reverse lookup from reversed query name to PTR answer
DNS Reverse Lookups in Windows and Windows Server
Published March 24, 2025 · DSE reviewed August 26, 2026
GuideAdvisory
Trace Windows Time Service settings aren't preserved across Active Directory and Windows DNS
Windows Time Service settings aren't preserved
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Track a Network Watcher capture file beyond the capture resource
Manage Packet Captures - Azure Network Watcher | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Track Azure NIC MAC addresses as lifecycle-bound observations
Create, Change, or Delete Azure Network Interfaces | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Track RDS role certificates separately from the session-host listener
Use certificates in Remote Desktop Services
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Treat a custom DDoS threshold as a replacement for that protocol's autotuning
Create a DDoS Protection custom policy in the Azure portal (preview) | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Treat a live Intune device query as evidence with a trust boundary
Device Query - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingImportant
Treat a Windows safeguard hold as compatibility evidence—not update drift
Safeguard holds
Publication date not specified · DSE reviewed August 25, 2026
GuideInformation
Treat an Azure subscription directory transfer as an identity rebuild
Transfer an Azure subscription to a different Microsoft Entra directory | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Treat an FSRM expiration task as a controlled file move
Create a File Expiration Task
Publication date not specified · DSE reviewed September 8, 2026
ExplainerInformation
Treat an unknown rich application-health signal as actionable, not healthy
Use Application Health extension with Azure Virtual Machine Scale Sets - Azure Virtual Machine Scale Sets | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Treat browser extensions as software with permissions, owners, and retirement
Microsoft Learn: Manage extensions in Microsoft Edge
Publication date not specified · DSE reviewed August 17, 2026
GuideInformation
Treat community gallery withdrawal as a consumer capacity change
Share Azure Compute Gallery Resources with a Community Gallery - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Treat derived-credential issuer recreation as a credential migration
Use derived credentials for mobile devices with Microsoft Intune - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Treat endpoint anomaly correlations as investigation leads
Anomalies Report for Proactive Device Issue Detection - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerAdvisory
Treat Entra Terms of Use acceptance as policy evidence—not legal proof
Set up Microsoft Entra Terms of Use with Conditional Access
Publication date not specified · DSE reviewed August 25, 2026
ChecklistAdvisory
Treat every endpoint-protection exclusion as an expiring security exception
Microsoft Learn: Contextual file and folder exclusions
Publication date not specified · DSE reviewed August 17, 2026
PlaybookAdvisory
Treat every GPO as two replicated components
Group Policy overview for Windows Server
Published June 10, 2025 · DSE reviewed August 26, 2026
BriefingInformation
Treat export-job cancellation as a permanent stop with partial output left behind
Run an Export Job in Azure Monitor Logs (Preview) - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Treat File Sync authoritative upload as a namespace mirror, not a merge
Create an Azure File Sync Server Endpoint | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Treat Hyper-V key-value exchange as persistent host-visible metadata
Data Exchange: Using key-value pairs to share information between the host and guest on Hyper-V
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Treat local Machine Configuration remediation tests as real changes to the test host
How to test machine configuration package artifacts - Azure Machine Configuration | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Treat per-disk resiliency as application-visible I/O failure, not uninterrupted disk access
Improve workload availability with per-disk resiliency (preview) - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Treat Profiler BYOS as a destination change, not a historical artifact migration
BYOS for Profiler and Debugger - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Treat proximity-placement intent as a compatibility constraint, not reserved capacity
Proximity placement groups - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Treat secondary-region storage reads as potentially inconsistent across related updates
Use geo-redundancy to design highly available applications - Azure Storage | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingInformation
Treat Sentinel incident grouping as initial guidance after Defender portal onboarding
Create scheduled analytics rules in Microsoft Sentinel | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Treat SQL backup discovery as a VM registration change
Back up multiple SQL Server VMs from the vault - Azure Backup | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Treat standalone Defender for Identity sensor coverage as limited without ETW
Microsoft Defender for Identity standalone sensor prerequisites
Published November 26, 2023 · DSE reviewed August 26, 2026
GuideAdvisory
Treat Sysmon configuration as detection code with volume and privacy tests
Sysmon
Publication date not specified · DSE reviewed August 25, 2026
GuideInformation
Treat the AOSP userless enrollment QR code as a credential-bearing artifact
Set up Android (AOSP) device management in Intune for corporate-owned userless devices - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Treat the cluster functional-level update as a rolling-upgrade decision point
Upgrade the OS of a Windows Server failover cluster by performing a cluster OS rolling upgrade
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Treat VM user data as mutable shared metadata rather than a secret delivery channel
User data for Azure Virtual Machine - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Treat VM watch's outbound-disabled attribute as a test-eligibility declaration
Configure VM watch - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerInformation
Treat workbook multiselection exports as unique values, not selected-row counts
Create interactive reports with Azure Monitor Workbooks - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingAdvisory
Triage AD replication failures across DNS, network, and security layers
Troubleshooting Active Directory Replication Problems
Published May 12, 2025 · DSE reviewed August 26, 2026
PlaybookAdvisory
Triage Defender for Identity health issues by environment and sensor
Microsoft Defender for Identity health issues
Published August 10, 2026 · DSE reviewed August 26, 2026
ChecklistAdvisory
Tune Entra smart lockout from sign-in and helpdesk evidence
Protect user accounts from attacks with Microsoft Entra smart lockout
Publication date not specified · DSE reviewed August 25, 2026
GuideInformation
Turn cluster performance history into an explicit PowerShell comparison
Scripting with Storage Spaces Direct performance history
Publication date not specified · DSE reviewed September 8, 2026
PlaybookAdvisory
Turn Microsoft 365 Service health and Message center into an owned operations process
Microsoft Learn: How to check Microsoft 365 service health
Published February 9, 2026 · DSE reviewed July 19, 2026
PlaybookImportant
Turn provisioning logs and quarantine into an identity-delivery work queue
Understand how Application Provisioning in Microsoft Entra ID
Publication date not specified · DSE reviewed August 25, 2026
GuideInformation
Understand how ReFS keeps block-cloned files independent when they change
Block cloning on ReFS
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Understand the deduplication chunk store before investigating disk usage
Understanding Data Deduplication
Publication date not specified · DSE reviewed September 8, 2026
ExplainerInformation
Understand why a workbook refresh preserves the reader's dropdown choice
Azure Monitor workbook dropdown parameters - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerAdvisory
Undo-ADServiceAccountMigration: undo adservice account migration against recorded identity and DNS state
Undo-ADServiceAccountMigration
Publication date not specified · DSE reviewed August 27, 2026
ExplainerAdvisory
Unlock-ADAccount: unlock adaccount against recorded identity and DNS state
Unlock-ADAccount
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Update Linux certificate consumers for the Key Vault extension's split-file format
Azure Key Vault virtual machine extension for Linux - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Update Network ATC intents when cluster adapters change
Manage Network ATC
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Update NPS policy certificate bindings after certificate expiration
Manage Certificates Used with NPS
Publication date not specified · DSE reviewed September 8, 2026
ChecklistAdvisory
Update SPNs after service identity or hostname changes
How to configure SPN for Windows Server
Published March 24, 2025 · DSE reviewed August 26, 2026
GuideAdvisory
Update-DnsServerTrustPoint: update dns server trust point with before-and-after evidence
Update-DnsServerTrustPoint
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Use a gMSA only for Defender for Identity sensor v2 directory reads
Configure a gMSA directory service account for Defender for Identity
Published August 3, 2026 · DSE reviewed August 26, 2026
GuideInformation
Use a shared heatmap scale when workbook columns must be compared
Azure Monitor workbook grid visualizations - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Use a successful manual image build to recover a deactivated Image Builder trigger
How to enable automatic image creation with Azure Image Builder triggers - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Use a supported secure output type when Bicep must return sensitive structured data
Outputs in Bicep - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Use Advanced Audit Policy Configuration for granular Windows Server event selection
Advanced Audit Policy Configuration
Published May 29, 2025 · DSE reviewed August 26, 2026
GuideInformation
Use Always Offline mode with an explicit synchronization acceptance test
Enable Always Offline mode for faster access to files in Windows and Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Use an ARM discriminator when an input tag selects a different object schema
Type definitions in templates - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Use an explicit rerun signal when a scale-set extension's script URI stays unchanged
Modify an Azure Virtual Machine Scale Set - Azure Virtual Machine Scale Sets | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Use an on-demand FSRM report for a defined storage question
Generate reports on demand in Windows Server
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Use attachment-password rescanning instead of bypassing an encrypted-attachment quarantine
Find and release quarantined messages as a user - Microsoft Defender for Office 365 | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Use authentication context to require stronger proof only when the action deserves it
Microsoft Learn: Conditional Access target resources and authentication context
Publication date not specified · DSE reviewed August 17, 2026
ExplainerAdvisory
Use Azure resource locks as a deletion guard—not a backup or permission boundary
Lock your Azure resources to protect your infrastructure
Publication date not specified · DSE reviewed August 25, 2026
GuideInformation
Use blob-relative values in Azure Storage path conditions
Actions and attributes for Azure role assignment conditions for Azure Blob Storage - Azure Storage | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
PlaybookAdvisory
Use Defender for Identity alerts for detections, not complete audit history
Security alerts in Microsoft Defender for Identity
Published July 1, 2026 · DSE reviewed August 26, 2026
ExplainerAdvisory
Use Defender for Identity sensor logs to reconstruct chronological sensor state
Troubleshooting Microsoft Defender for Identity sensor using the Defender for Identity logs
Published July 2, 2026 · DSE reviewed August 26, 2026
GuideAdvisory
Use Entra access reviews to remove access that no longer has an owner
Microsoft Learn: What are access reviews?
Published March 12, 2026 · DSE reviewed July 19, 2026
GuideInformation
Use exact certificate names for Service Fabric presentation lookup
X.509 Certificate-based Authentication in a Service Fabric Cluster - Azure Service Fabric | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistInformation
Use Exchange Online message trace as evidence, not guesswork
Microsoft Learn: Message trace in the Exchange admin center in Exchange Online
Published May 27, 2026 · DSE reviewed July 19, 2026
ChecklistAdvisory
Use full-server recovery only for the matching restore scenario
AD Forest Recovery - Performing a full server recovery
Published June 21, 2023 · DSE reviewed August 26, 2026
GuideInformation
Use Hyper-V Manager from a separate management computer
Remotely Manage Hyper-V Hosts
Publication date not specified · DSE reviewed September 8, 2026
ExplainerInformation
Use Microsoft Secure Score as a work queue, not a breach guarantee
Microsoft Learn: Microsoft Secure Score
Published March 7, 2026 · DSE reviewed July 19, 2026
GuideAdvisory
Use monitored identity activities to scope and triage potential threats
Microsoft Defender for Identity monitored activities
Published February 12, 2024 · DSE reviewed August 26, 2026
ChecklistAdvisory
Use nonauthoritative AD restore for controllers that must resynchronize
Active Directory Forest Recovery - Performing a nonauthoritative restore of Active Directory Domain Services
Published June 21, 2023 · DSE reviewed August 26, 2026
ExplainerAdvisory
Use offering-specific Defender for Identity endpoints and licenses in US Government clouds
Microsoft Defender for Identity for US Government offerings
Published February 14, 2023 · DSE reviewed August 26, 2026
BriefingAdvisory
Use optional computer-account prestaging to prepare the target OU and permissions
Join a computer to a domain
Published June 6, 2025 · DSE reviewed August 26, 2026
GuideInformation
Use Pktmon counters to narrow a Windows packet-capture investigation
Packet Monitor (Pktmon)
Publication date not specified · DSE reviewed September 8, 2026
ExplainerAdvisory
Use ReFS resiliency only inside a supported storage and application design
Resilient File System (ReFS) overview
Publication date not specified · DSE reviewed August 25, 2026
GuideImportant
Use restricted management administrative units only after workflow testing
Restricted management administrative units in Microsoft Entra ID
Publication date not specified · DSE reviewed August 25, 2026
ExplainerInformation
Use separate metric rules when conditions must alert independently
Monitor multiple time series in a single metric alert rule - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideAdvisory
Use SharePoint Restricted Access Control as a second access boundary
Microsoft Learn: Restrict SharePoint site access with Microsoft 365 groups and Microsoft Entra security groups
Published July 15, 2026 · DSE reviewed July 19, 2026
ExplainerAdvisory
Use SIDs, not display names, when reconciling Windows access
Security Identifiers
Published June 26, 2025 · DSE reviewed August 26, 2026
GuideInformation
Use the HCN API at the application-to-host networking boundary
Host Compute Network (HCN) service API for VMs and containers
Publication date not specified · DSE reviewed September 8, 2026
ExplainerAdvisory
Use the identity inventory to triage accounts across on-premises, cloud, and SaaS systems
View the Identity inventory
Published June 22, 2026 · DSE reviewed August 26, 2026
ExplainerInformation
Use the reporting refresh time when interpreting Defender Antivirus update status
Device health Microsoft Defender Antivirus health report - Microsoft Defender for Endpoint | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Use the submission route when a URL exception must address a high-confidence verdict
Allow or block URLs using the Tenant Allow/Block List - Microsoft Defender for Office 365 | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Use the VM resource API that matches the scale set's orchestration mode
Orchestration modes for Virtual Machine Scale Sets in Azure - Azure Virtual Machine Scale Sets | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
BriefingAdvisory
Use VM-Generation ID and DCCloneConfig.xml to separate cloning from restore
Virtualized Domain Controller Architecture
Published May 12, 2025 · DSE reviewed August 26, 2026
GuideAdvisory
Use Windows Autopilot device preparation for the scenarios it actually supports
Microsoft Learn: Compare Windows Autopilot device preparation and Windows Autopilot
Published April 2, 2025 · DSE reviewed August 11, 2026
GuideAdvisory
Use Windows time-of-day DNS policies only with deterministic priority and fallback
Use DNS Policy for Intelligent DNS Responses Based on the Time of Day
Published December 2, 2021 · DSE reviewed August 26, 2026
ChecklistAdvisory
Validate Access is denied when you promote domain controller with AD/DNS evidence
Access is denied when you promote domain controller
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Active Directory Domain Services Maximum Limits and Scalability with AD/DNS evidence
Active Directory Domain Services Maximum Limits and Scalability
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Active Directory domain-wide schema updates with AD/DNS evidence
Active Directory domain-wide schema updates
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Active Directory Flexible Single Master Operation (FSMO) roles in Windows with AD/DNS evidence
Active Directory Flexible Single Master Operation (FSMO) roles in Windows
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Active Directory Forest Recovery - Recovering a single domain in a multidomain forest with AD/DNS evidence
Active Directory Forest Recovery - Recovering a single domain in a multidomain forest
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Active Directory replication event ID 2108 and 1084 with AD/DNS evidence
Active Directory replication event ID 2108 and 1084
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate AD Forest Recovery - Redeploy remaining DCs with AD/DNS evidence
AD Forest Recovery - Redeploy remaining DCs
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate AD Forest Recovery - Reset the krbtgt password with AD/DNS evidence
AD Forest Recovery - Reset the krbtgt password
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate AD Replication error 8333 Directory Object Not Found with AD/DNS evidence
AD Replication error 8333 Directory Object Not Found
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate ADFS 2.0 certificate error with AD/DNS evidence
ADFS 2.0 certificate error
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Advanced AD DS Management Using Active Directory Administrative Center (Level 200) with AD/DNS evidence
Advanced AD DS Management Using Active Directory Administrative Center (Level 200)
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate An Attempt to Resolve the DNS Name of a DC in the Domain Being Joined Has Failed with AD/DNS evidence
An Attempt to Resolve the DNS Name of a DC in the Domain Being Joined Has Failed
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Appendix I - Creating Management Accounts for Protected Accounts and Groups in Active Directory with AD/DNS evidence
Appendix I - Creating Management Accounts for Protected Accounts and Groups in Active Directory
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Validate architecture-specific CVEs before accepting a Defender device correlation
Vulnerabilities in my organization - Microsoft Defender Vulnerability Management | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistAdvisory
Validate Attractive Accounts for Credential Theft with AD/DNS evidence
Attractive Accounts for Credential Theft
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Validate Autopilot registration CSVs before assigning users
Manually Register Devices with Windows Autopilot | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Validate Blob inventory output before accepting its completion event
Azure Storage blob inventory | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Validate both clusters before pairing them with Storage Replica
Cluster-to-cluster storage replication
Publication date not specified · DSE reviewed September 8, 2026
ChecklistAdvisory
Validate Certificate template concepts in Windows Server with AD/DNS evidence
Certificate template concepts in Windows Server
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Change display names of AD users with AD/DNS evidence
Change display names of AD users
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Computer clock resets to a previous date and time with AD/DNS evidence
Computer clock resets to a previous date and time
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Configure an authoritative time with AD/DNS evidence
Configure an authoritative time
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Configure Certificate Enrollment Web Service for certificate key-based renewal on a custom port with AD/DNS evidence
Configure Certificate Enrollment Web Service for certificate key-based renewal on a custom port
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Deleting Active Directory objects that have many links causes replication failures with AD/DNS evidence
Deleting Active Directory objects that have many links causes replication failures
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Determining the Number of Domains Required with AD/DNS evidence
Determining the Number of Domains Required
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Disable and replace TLS 1.0 in ADFS with AD/DNS evidence
Disable and replace TLS 1.0 in ADFS
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate DNS Encryption using DNS over HTTPS in Windows and Windows Server with AD/DNS evidence
DNS Encryption using DNS over HTTPS in Windows and Windows Server
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate DNS Responses Based on Time of Day with an Azure Cloud App Server with AD/DNS evidence
DNS Responses Based on Time of Day with an Azure Cloud App Server
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate DNS Servers may fail to resolve queries for some top-level domains with AD/DNS evidence
DNS Servers may fail to resolve queries for some top-level domains
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate DNS zone transfer fails when using Only to servers listed in the Name servers tab with AD/DNS evidence
DNS zone transfer fails when using Only to servers listed in the Name servers tab
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Domain controller is not functioning correctly with AD/DNS evidence
Domain controller is not functioning correctly
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Domain Join Log Analysis with AD/DNS evidence
Domain Join Log Analysis
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Enable Database 32k pages optional feature in Active Directory Domain Services on Windows Server with AD/DNS evidence
Enable Database 32k pages optional feature in Active Directory Domain Services on Windows Server
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Enable Kerberos event logging with AD/DNS evidence
Enable Kerberos event logging
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate every prerequisite before cloning a virtualized domain controller
Virtualized Domain Controller Deployment and Configuration
Published May 12, 2025 · DSE reviewed August 26, 2026
ChecklistAdvisory
Validate Forwarders resolution timeouts with AD/DNS evidence
Forwarders resolution timeouts
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Get started with Windows LAPS and Microsoft Entra ID with AD/DNS evidence
Get started with Windows LAPS and Microsoft Entra ID
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate How to move Windows DNS zones to another Windows server with AD/DNS evidence
How to move Windows DNS zones to another Windows server
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate How to upgrade Windows 2000 domain controllers to Windows Server 2003 with AD/DNS evidence
How to upgrade Windows 2000 domain controllers to Windows Server 2003
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate ISMServ.exe fails to start when a domain controller starts with AD/DNS evidence
ISMServ.exe fails to start when a domain controller starts
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate LDAP to Active Directory is disabled with AD/DNS evidence
LDAP to Active Directory is disabled
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Validate Linux extension readiness across platform opt-in, guest mode, and agent version
FIPS 140-3 Support for Azure Linux VM Extensions and Guest Agent - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistAdvisory
Validate LSA Lookup performance counters in Windows and Windows Server with AD/DNS evidence
LSA Lookup performance counters in Windows and Windows Server
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Microsoft support for Single Label Domains with AD/DNS evidence
Microsoft support for Single Label Domains
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Name resolution and connectivity issues with AD/DNS evidence
Name resolution and connectivity issues
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Validate new identity sensors through status, device timeline, and identity data
Validate sensor deployment on domain controllers
Published July 2, 2026 · DSE reviewed August 26, 2026
ChecklistAdvisory
Validate Planning Regional Domain Controller Placement with AD/DNS evidence
Planning Regional Domain Controller Placement
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Raise Domain and Forest Functional Levels in AD DS on Windows Server with AD/DNS evidence
Raise Domain and Forest Functional Levels in AD DS on Windows Server
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Replication error 1753 There are no more endpoints available from the endpoint mapper with AD/DNS evidence
Replication error 1753 There are no more endpoints available from the endpoint mapper
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Requirements for domain controller with AD/DNS evidence
Requirements for domain controller
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Restore user accounts and groups in AD with AD/DNS evidence
Restore user accounts and groups in AD
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Restrict Active Directory RPC traffic to a specific port with AD/DNS evidence
Restrict Active Directory RPC traffic to a specific port
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Restrict use of a computer to one domain user only with AD/DNS evidence
Restrict use of a computer to one domain user only
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Support policy and known issues for ADMT with AD/DNS evidence
Support policy and known issues for ADMT
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Validate the complete firewall path for RADIUS requests and replies
Configure Firewalls for RADIUS Traffic
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Validate the database connection before adding a highly available RDS broker
Configure RD Connection Broker for High Availability
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Validate the expanded Machine Configuration package, not just its ZIP size
How to create custom machine configuration package artifacts - Azure Machine Configuration | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Validate the HANA host role before submitting a NetApp volume-group request
Configure application volume groups for SAP HANA using REST API | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Validate the portal control's values against the deployment template
createUiDefinition.json test cases for Azure Resource Manager test toolkit - Azure Resource Manager | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Validate the specific availability test beyond its shared source addresses
Application Insights availability tests - Azure Monitor | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistAdvisory
Validate Troubleshoot AD FS issues with AD/DNS evidence
Troubleshoot AD FS issues
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Troubleshoot AD replication error 5 Access is denied with AD/DNS evidence
Troubleshoot AD replication error 5 Access is denied
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Troubleshoot Authentication Errors When Joining Windows-based Computers to a Domain with AD/DNS evidence
Troubleshoot Authentication Errors When Joining Windows-based Computers to a Domain
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Troubleshoot DNS Event ID 4013 with AD/DNS evidence
Troubleshoot DNS Event ID 4013
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Troubleshoot Event ID 2866 (Maximum Number of Cached Audit Events) with AD/DNS evidence
Troubleshoot Event ID 2866 (Maximum Number of Cached Audit Events)
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Troubleshoot high Lsass.exe CPU usage with AD/DNS evidence
Troubleshoot high Lsass.exe CPU usage
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Troubleshoot LDAP over SSL connection problems with AD/DNS evidence
Troubleshoot LDAP over SSL connection problems
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Troubleshoot replication error 8461 with AD/DNS evidence
Troubleshoot replication error 8461
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Upgrade Domain Controllers to Windows Server 2012 R2 and Windows Server 2012 with AD/DNS evidence
Upgrade Domain Controllers to Windows Server 2012 R2 and Windows Server 2012
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Use DNS Policy for Split-Brain DNS Deployment with AD/DNS evidence
Use DNS Policy for Split-Brain DNS Deployment
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Use Ntdsutil to find and clean up with AD/DNS evidence
Use Ntdsutil to find and clean up
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate Use the online dbdump feature in Ldp.exe with AD/DNS evidence
Use the online dbdump feature in Ldp.exe
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate View and transfer FSMO roles with AD/DNS evidence
View and transfer FSMO roles
Publication date not specified · DSE reviewed August 27, 2026
GuideInformation
Validate VPN gateway traffic before committing the Basic public-IP migration
How to migrate a Basic SKU public IP address to a Standard SKU for VPN Gateway - Azure VPN Gateway | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistAdvisory
Validate What is Active Directory Certificate Services in Windows Server? with AD/DNS evidence
What is Active Directory Certificate Services in Windows Server?
Publication date not specified · DSE reviewed August 27, 2026
ChecklistAdvisory
Validate What is ML-DSA support in AD CS? with AD/DNS evidence
What is ML-DSA support in AD CS?
Publication date not specified · DSE reviewed August 27, 2026
PlaybookAdvisory
Validate Windows Anycast DNS from the routing path, not only the shared address
Anycast DNS overview
Published February 13, 2023 · DSE reviewed August 26, 2026
ChecklistAdvisory
Validate Winlogon automatic restart sign-on (ARSO) with AD/DNS evidence
Winlogon automatic restart sign-on (ARSO)
Publication date not specified · DSE reviewed August 27, 2026
BriefingAdvisory
Verify AD and SYSVOL replication after every forest restore stage
AD Forest Recovery - Verify Replication
Published September 25, 2025 · DSE reviewed August 26, 2026
GuideInformation
Verify AIR action outcomes even when an investigation says Remediated
Details and results of AIR in Defender for Office 365 Plan 2 - Microsoft Defender for Office 365 | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistAdvisory
Verify both base and delta CRLs through the enrollment endpoint
Retrieve base & delta CRLs using Web Enrollment in AD CS
Published September 4, 2023 · DSE reviewed August 26, 2026
GuideInformation
Verify both sides of a Work Folders proxy publication
Deploy Work Folders with AD FS and Web Application Proxy - Step 4, Set Up Web Application Proxy
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Verify capacity-reservation disassociation separately from VM deallocation
Remove a virtual machine association from a capacity reservation group - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Verify container-group egress identity separately from its inbound address
Configure Static Outbound IP - Azure Container Instances | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Verify cross-app sign-out separately from Android shared-device enrollment
Get started with Android frontline worker devices - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerAdvisory
Verify Kernel DMA Protection on every high-risk endpoint
Kernel DMA Protection
Published August 15, 2025 · DSE reviewed August 26, 2026
GuideInformation
Verify multidisk backup coordination before striping an AVS guest filesystem
Azure VMware Solution datastore performance considerations for Azure NetApp Files | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Verify Resource Graph candidates against the provider before irreversible actions
Choose the right query strategy for Azure Resource Graph - Azure Resource Graph | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Verify superseding updates when an expedited Windows policy installs a newer release
Expedite Policies for Windows Quality Updates - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Verify the exclusion list after changing a VMware backup disk selection
Back up VMware VMs using Azure Backup Server - Azure Backup | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Verify the file destination during a nonclustered Hyper-V live move
Use live migration without Failover Clustering to move a VM
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Verify the Gateway Load Balancer service chain before claiming inline inspection
Inline L7 DDoS Protection with Gateway Load Balancer and partner NVAs | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistInformation
Verify the image's NVMe capability before accepting a new VM deployment
NVMe Overview - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ChecklistInformation
Verify the Linux atomic-write path before relying on managed-disk torn-write protection
Prevent torn writes with managed disks on Linux VMs - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Verify the network paths actually selected by SMB Multichannel
Manage SMB Multichannel
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Verify the RemoteApp catalog before publishing an RDS collection
Create a Remote Desktop Services collection
Publication date not specified · DSE reviewed September 8, 2026
GuideInformation
Verify the security type produced by Trusted Launch defaults
Trusted Launch for Azure VMs - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Verify the selected VM set before a Windows Admin Center bulk action
Manage Virtual Machines with Windows Admin Center
Publication date not specified · DSE reviewed September 8, 2026
GuideImportant
Version Azure Monitor data collection rules like production routing code
Data collection rules (DCRs) in Azure Monitor
Publication date not specified · DSE reviewed August 25, 2026
GuideInformation
Wait for feature-policy processing before removing Windows update deferrals
Configure Windows Feature Update Policies - Microsoft Intune | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
ExplainerAdvisory
Wait for KDS root-key convergence before creating gMSAs
Create a Key Distribution Service (KDS) Root Key
Published July 9, 2025 · DSE reviewed August 26, 2026
ChecklistInformation
Wait for ordered snapshot copies to finish before accepting a regional recovery copy
Copy a snapshot to a new region - Azure Virtual Machines | Microsoft Learn
Publication date not specified · DSE reviewed September 9, 2026
GuideInformation
Wait for storage resynchronization before the next cluster interruption
Understand and monitor storage resync
Publication date not specified · DSE reviewed September 8, 2026
PlaybookAdvisory
Windows deployment rings: move updates from pilot to broad release with evidence
Microsoft Learn: Create a deployment plan
Publication date not specified · DSE reviewed July 19, 2026
GuideAdvisory
Windows security baselines: test Microsoft recommendations before broad enforcement
Microsoft Learn: Microsoft Security Compliance Toolkit
Publication date not specified · DSE reviewed July 19, 2026
PlaybookAdvisory
You receive an "access is denied" error message on a domain controller when you try to replicate the Active Directory directory service
You receive an "access is denied" error message on a domain controller when you try to replicate the Active Directory directory service
Publication date not specified · DSE reviewed August 27, 2026
modelcontextprotocol.io
1 resourceChecklistAdvisory
Treat every MCP server as a software-supply-chain and identity boundary
Model Context Protocol 2026-07-28 Authorization Specification
Published July 28, 2026 · DSE reviewed August 17, 2026
msc.fema.gov
1 resourceChecklistImportant
Check FEMA flood-hazard data before siting recovery equipment
Flood Hazard Products Direct Download
Publication date not specified · DSE reviewed August 25, 2026
msrc.microsoft.com
2 resourcesBriefingImportant
CVE-2026-68820 Is Actively Exploited: Verify the August Windows Fix
Microsoft Security Response Center: CVE-2026-68820
Published August 11, 2026 · DSE reviewed August 12, 2026
BriefingImportant
CVE-2026-70329 in Outlook: What the 8.8 RCE Means and How to Respond
Microsoft Security Response Center (MSRC)
Published August 11, 2026 · DSE reviewed August 12, 2026
National Fire Protection Association
4 resourcesChecklistImportant
Inspect fire doors as complete assemblies, then control every repair
NFPA 80: Standard for Fire Doors and Other Opening Protectives, 2025 edition
Published January 1, 2025 · DSE reviewed August 11, 2026
PlaybookImportant
Manage fire-protection impairments before the valve closes
NFPA 25: Standard for the Inspection, Testing, and Maintenance of Water-Based Fire Protection Systems, 2026 edition
Published January 1, 2026 · DSE reviewed August 11, 2026
GuideImportant
Prove in-building responder radio coverage without creating interference
NFPA 1225: Standard for Emergency Services Communications, 2022 edition
Published January 1, 2022 · DSE reviewed August 11, 2026
ChecklistImportant
Test life-safety integrations from first input to final output
NFPA 4: Standard for Integrated Fire Protection and Life Safety System Testing, 2024 edition
Published January 1, 2024 · DSE reviewed August 11, 2026
National Institute of Standards and Technology
78 resourcesGuideAdvisory
Adopt ML-DSA with signature lifecycle and interoperability evidence
FIPS 204 — Module-Lattice-Based Digital Signature Standard
Published August 13, 2024 · DSE reviewed August 25, 2026
GuideAdvisory
Adopt ML-KEM only through supported, testable protocol implementations
FIPS 203 — Module-Lattice-Based Key-Encapsulation Mechanism Standard
Published August 13, 2024 · DSE reviewed August 25, 2026
GuideImportant
Apply secure-development practices to the AI model lifecycle, not only the application
NIST SP 800-218A — Secure Software Development Practices for Generative AI and Dual-Use Foundation Models
Published July 26, 2024 · DSE reviewed August 25, 2026
GuideAdvisory
Ask cybersecurity questions before buying a network-connected security device
NIST IR 8259 Rev. 1 — Foundational Cybersecurity Activities for IoT Product Manufacturers
Published April 20, 2026 · DSE reviewed July 19, 2026
PlaybookImportant
Assess CUI safeguards with evidence, depth, and coverage chosen up front
NIST SP 800-171A Rev. 3 — Assessing Security Requirements for Controlled Unclassified Information
Publication date not specified · DSE reviewed August 25, 2026
PlaybookImportant
Assess whether controls produce the intended outcome—not whether they exist
NIST SP 800-53A Rev. 5: Assessing Security and Privacy Controls
Published January 25, 2022 · DSE reviewed August 11, 2026
GuideImportant
Authorize cloud-native services by workload identity—not subnet membership
NIST SP 800-207A — A Zero Trust Architecture Model for Access Control in Cloud-Native Applications
Published September 13, 2023 · DSE reviewed August 25, 2026
ChecklistAdvisory
Back up physical-security controllers like OT: configurations, tools, licenses, spares, and restore tests
NIST SP 1339 — OT Backup Quick Start Guide
Published June 17, 2026 · DSE reviewed July 19, 2026
GuideAdvisory
Build a cybersecurity learning program that changes behavior
NIST SP 800-50 Rev. 1: Cybersecurity and Privacy Learning Program
Published September 12, 2024 · DSE reviewed July 28, 2026
ChecklistAdvisory
Build a firewall rule lifecycle that survives staff and system changes
NIST SP 800-41 Rev. 1 — Guidelines on Firewalls and Firewall Policy
Published September 28, 2009 · DSE reviewed July 19, 2026
PlaybookAdvisory
Build an incident-response plan before the first urgent call
NIST SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management
Published April 3, 2025 · DSE reviewed July 19, 2026
PlaybookImportant
Build an IPsec profile before negotiating each tunnel by exception
NIST SP 800-77 Rev. 1: Guide to IPsec VPNs
Published June 30, 2020 · DSE reviewed August 25, 2026
GuideAdvisory
Build cyber supply-chain risk management into the full product lifecycle
NIST SP 800-161 Rev. 1 Update 1: Cybersecurity Supply Chain Risk Management Practices
Published November 1, 2024 · DSE reviewed July 19, 2026
GuideImportant
Categorize security impact before choosing controls
NIST FIPS 199: Standards for Security Categorization
Published February 1, 2004 · DSE reviewed August 11, 2026
PlaybookImportant
Control controllers and servers through receiving and removal
NIST SP 800-53 Release 5.2.0, PE-16 — Delivery and Removal
Published August 27, 2025 · DSE reviewed August 25, 2026
GuideAdvisory
Control physical access credentials from issue through revocation
NIST SP 800-53 Rev. 5 Update 1: Security and Privacy Controls
Published September 23, 2020 · DSE reviewed July 28, 2026
GuideAdvisory
Create a vulnerability-disclosure channel that researchers can actually use
NIST SP 800-216: Recommendations for Federal Vulnerability Disclosure Guidelines
Published May 24, 2023 · DSE reviewed July 19, 2026
GuideInformation
Create an enterprise log-management policy before choosing a SIEM
NIST SP 800-92: Guide to Computer Security Log Management
Published September 13, 2006 · DSE reviewed July 19, 2026
GuideImportant
Define the CUI system boundary before claiming NIST SP 800-171 coverage
NIST SP 800-171 Rev. 3 — Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
Publication date not specified · DSE reviewed August 25, 2026
PlaybookAdvisory
Deploy application allowlisting as a controlled production change
NIST Special Publication 800-167
Published October 28, 2015 · DSE reviewed August 4, 2026
PlaybookImportant
Design cloud forensic readiness before evidence is needed
NIST SP 800-201: Cloud Computing Forensic Reference Architecture
Published July 30, 2024 · DSE reviewed August 11, 2026
PlaybookAdvisory
Design cyber recovery playbooks around prioritized services and tested evidence
NIST SP 800-184: Guide for Cybersecurity Event Recovery
Published December 22, 2016 · DSE reviewed July 19, 2026
BriefingAdvisory
Detect, mitigate, and contain data-integrity events as one response workflow
SP 1800-26, Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events
Publication date not specified · DSE reviewed August 26, 2026
ChecklistImportant
Do not let a familiar voice or face authorize a sensitive action
NIST AI 100-4, Reducing Risks Posed by Synthetic Content
Published November 20, 2024 · DSE reviewed August 4, 2026
ExplainerAdvisory
Encrypted DNS in enterprise networks: preserve privacy without losing visibility
NIST SP 800-81 Rev. 3: Secure Domain Name System (DNS) Deployment Guide
Published March 19, 2026 · DSE reviewed July 19, 2026
GuideImportant
Engineer critical services to anticipate, withstand, recover, and adapt
NIST SP 800-160 Vol. 2 Rev. 1: Developing Cyber-Resilient Systems
Published December 9, 2021 · DSE reviewed August 11, 2026
ExplainerAdvisory
Extend business impact analysis from availability to every mission-relevant loss
IR 8286D, Using Business Impact Analysis to Inform Risk Prioritization and Response
Publication date not specified · DSE reviewed August 26, 2026
GuideImportant
Give every cryptographic key an owner, purpose, lifetime, and recovery rule
NIST SP 800-57 Part 1 Rev. 5 — Recommendation for Key Management: General
Published May 4, 2020 · DSE reviewed August 25, 2026
GuideImportant
Give every microservice a security contract for identity, traffic, and failure
NIST SP 800-204 — Security Strategies for Microservices-based Application Systems
Publication date not specified · DSE reviewed August 25, 2026
ChecklistImportant
Give every security test written rules of engagement
NIST SP 800-115: Technical Guide to Information Security Testing and Assessment
Published September 30, 2008 · DSE reviewed August 11, 2026
GuideAdvisory
Give the board cybersecurity metrics that support risk decisions
NIST IR 8286 Revision 1
Published December 18, 2025 · DSE reviewed August 4, 2026
PlaybookImportant
Govern every sensitive information exchange through its full lifecycle
NIST SP 800-47 Rev. 1: Managing the Security of Information Exchanges
Published July 20, 2021 · DSE reviewed August 11, 2026
GuideImportant
Govern storage as infrastructure—not just capacity
NIST SP 800-209 — Security Guidelines for Storage Infrastructure
Published October 26, 2020 · DSE reviewed August 25, 2026
GuideAdvisory
Identify devices, data, applications, and vulnerabilities before a destructive data event
SP 1800-25, Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Keep system plans current with control status and named responsibilities
SP 800-18 Rev. 2, Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Make every security exception expire—or escalate
NIST SP 800-37 Rev. 2: Risk Management Framework
Publication date not specified · DSE reviewed August 17, 2026
GuideImportant
Make federation trust explicit before accepting another identity provider's assertion
NIST SP 800-63C-4 — Digital Identity Guidelines: Federation and Assertions
Published July 31, 2025 · DSE reviewed August 25, 2026
GuideImportant
Make identity proofing recoverable, equitable, and evidence-based
NIST SP 800-63A-4: Identity Proofing and Enrollment
Published July 31, 2025 · DSE reviewed August 11, 2026
PlaybookAdvisory
Make incident response part of every NIST CSF 2.0 function
NIST SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management
Published April 3, 2025 · DSE reviewed July 19, 2026
GuideAdvisory
Make risk assessment inputs and assumptions reviewable
NIST SP 800-30 Rev. 1 — Guide for Conducting Risk Assessments
Published September 17, 2012 · DSE reviewed August 25, 2026
ChecklistImportant
Make software verification a layered test plan, not a single scanner
NIST IR 8397 — Guidelines on Minimum Standards for Developer Verification of Software
Published October 6, 2021 · DSE reviewed August 25, 2026
ChecklistImportant
Manage mobile and BYOD security from enrollment through retirement
NIST SP 800-124 Rev. 2: Mobile Device Security
Published May 17, 2023 · DSE reviewed July 28, 2026
GuideImportant
Map cloud access control to the service layer that actually makes the decision
NIST SP 800-210 — General Access Control Guidance for Cloud Systems
Published July 31, 2020 · DSE reviewed August 25, 2026
ExplainerInformation
MFA, passkeys, and authentication strength: what the terms mean
NIST SP 800-63B-4: Authentication and Authenticator Management
Published July 31, 2025 · DSE reviewed July 19, 2026
GuideAdvisory
Model privacy risk around data actions and effects on people
NIST IR 8062 — An Introduction to Privacy Engineering and Risk Management in Federal Systems
Published January 4, 2017 · DSE reviewed August 25, 2026
GuideImportant
Modern password policy: strengthen sign-in without weakening account recovery
NIST SP 800-63B-4: Authentication and Authenticator Management
Published July 31, 2025 · DSE reviewed July 28, 2026
GuideInformation
NIST CSF 2.0 in plain English: a six-function roadmap
NIST Cybersecurity Framework (CSF) 2.0
Published February 26, 2024 · DSE reviewed July 19, 2026
ChecklistImportant
Place access-control components away from hazards and public reach
NIST SP 800-53 Release 5.2.0, PE-18 — Location of System Components
Published August 27, 2025 · DSE reviewed August 25, 2026
BriefingAdvisory
Prioritize cyber risks by enterprise impact before selecting a response
IR 8286B, Prioritizing Cybersecurity Risk for Enterprise Risk Management
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Protect virtual machines through the virtual network they actually use
NIST SP 800-125B — Secure Virtual Network Configuration for Virtual Machine Protection
Published March 7, 2016 · DSE reviewed August 25, 2026
GuideAdvisory
Protective DNS: evaluate the resolver, the data, and the bypass paths
NIST SP 800-81 Rev. 3: Secure Domain Name System (DNS) Deployment Guide
Published March 19, 2026 · DSE reviewed July 19, 2026
PlaybookImportant
Put software-supply-chain checks inside the CI/CD path
NIST SP 800-204D — Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD Pipelines
Publication date not specified · DSE reviewed August 25, 2026
GuideImportant
Rank critical components by mission consequence, not replacement cost
NISTIR 8179: Criticality Analysis Process Model
Published April 9, 2018 · DSE reviewed August 11, 2026
PlaybookAdvisory
Re-certify physical access from the role owner—not from the cardholder list
NIST SP 800-53 Revision 5.1: Security and Privacy Controls for Information Systems and Organizations
Publication date not specified · DSE reviewed August 17, 2026
PlaybookAdvisory
Reconcile PSA, RMM, identity, and billing inventories before managed-service scope drifts
NIST Cybersecurity Framework 2.0 Implementation Examples
Published February 26, 2024 · DSE reviewed August 17, 2026
GuideImportant
Require platform firmware to protect, detect, and recover
NIST SP 800-193 — Platform Firmware Resiliency Guidelines
Published May 4, 2018 · DSE reviewed August 25, 2026
ChecklistAdvisory
Retiring camera, recorder, and removable storage under NIST SP 800-88 Rev. 2
NIST SP 800-88 Rev. 2 — Guidelines for Media Sanitization
Published September 26, 2025 · DSE reviewed July 19, 2026
ChecklistImportant
Secure containers across images, registries, runtimes, and hosts
NIST SP 800-190 — Application Container Security Guide
Published September 25, 2017 · DSE reviewed August 25, 2026
GuideImportant
Select PIV door authentication from consequence and assurance
NIST SP 800-116 Rev. 1 - Guidelines for the Use of PIV Credentials in Facility Access
Published June 29, 2018 · DSE reviewed August 25, 2026
GuideAdvisory
Set a continuous-monitoring cadence from risk and rate of change
NIST SP 800-137: Information Security Continuous Monitoring
Published September 30, 2011 · DSE reviewed August 11, 2026
BriefingImportant
Stop using the PIV CHUID as a standalone door authenticator
FIPS 201-3 - Personal Identity Verification of Federal Employees and Contractors
Publication date not specified · DSE reviewed August 25, 2026
GuideAdvisory
Tailor control baselines without losing the reason for each change
NIST SP 800-53B — Control Baselines for Information Systems and Organizations
Publication date not specified · DSE reviewed August 25, 2026
ChecklistAdvisory
Track portable PACS tools and spare controllers inside controlled areas
NIST SP 800-53 Release 5.2.0, PE-20 — Asset Monitoring and Tracking
Published August 27, 2025 · DSE reviewed August 25, 2026
GuideAdvisory
Treat biometric access as a measured probabilistic control—not a flawless credential
NIST SP 800-63B-4: Authentication and Authenticator Management
Publication date not specified · DSE reviewed August 17, 2026
GuideAdvisory
Treat enterprise patching as preventive maintenance, not an emergency ritual
NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning
Published April 6, 2022 · DSE reviewed July 19, 2026
PlaybookImportant
Treat every SSH user key as a persistent access grant
NIST IR 7966: Security of Interactive and Automated Access Management Using Secure Shell (SSH)
Published October 15, 2015 · DSE reviewed August 25, 2026
GuideAdvisory
Treat physical access control as OT: segment it, constrain remote access, preserve availability
NIST SP 800-82 Rev. 3 — Guide to Operational Technology Security
Published September 28, 2023 · DSE reviewed July 19, 2026
ChecklistImportant
Treat the service mesh as security infrastructure with an owner
NIST SP 800-204A — Building Secure Microservices-based Applications Using Service-Mesh Architecture
Publication date not specified · DSE reviewed August 25, 2026
ChecklistImportant
Treat TLS configuration as a tested compatibility and cryptography decision
NIST SP 800-52 Rev. 2 — Guidelines for TLS Implementations
Published August 29, 2019 · DSE reviewed August 25, 2026
GuideInformation
Turn a business impact analysis into an information-system contingency plan
NIST SP 800-34 Rev. 1: Contingency Planning Guide for Federal Information Systems
Published November 11, 2010 · DSE reviewed July 19, 2026
PlaybookAdvisory
Turn configuration drift into a managed-service work queue—not an auto-fix button
NIST SP 800-128 Update 1
Publication date not specified · DSE reviewed August 17, 2026
PlaybookImportant
Turn NIST SSDF into owned software-development evidence—not a policy shelf
NIST SP 800-218 — Secure Software Development Framework (SSDF) Version 1.1
Published February 3, 2022 · DSE reviewed August 25, 2026
ExplainerAdvisory
Turn RMF authorization into an accountable lifecycle decision
NIST SP 800-37 Rev. 2 — Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy
Published December 20, 2018 · DSE reviewed August 25, 2026
PlaybookAdvisory
Turn SBOM files into exposure decisions and supplier questions
NIST Software Supply Chain Security Guidance: SBOM
Published May 3, 2022 · DSE reviewed August 4, 2026
ExplainerAdvisory
Use common ICT risk outcomes across cyber, privacy, and supply-chain programs
SP 800-221A, Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Use the NIST Privacy Framework as a risk conversation—not a compliance label
NIST Privacy Framework Version 1.0
Publication date not specified · DSE reviewed August 25, 2026
GuideAdvisory
Wi-Fi security is a lifecycle, not a one-time setup
NIST SP 800-153 — Guidelines for Securing Wireless Local Area Networks (WLANs)
Published February 21, 2012 · DSE reviewed July 19, 2026
ExplainerInformation
Zero trust in plain English: protect resources, not network locations
NIST SP 800-207: Zero Trust Architecture
Published August 11, 2020 · DSE reviewed July 19, 2026
Occupational Safety and Health Administration
7 resourcesPlaybookImportant
Align extinguisher placement, inspection, and training with the response policy
OSHA 29 CFR 1910.157: Portable Fire Extinguishers
Published November 7, 2002 · DSE reviewed August 11, 2026
PlaybookImportant
Connect workplace alarm technology to the emergency action plan
Occupational Safety and Health Administration: 29 CFR 1910.38—Emergency action plans
Published November 7, 2002 · DSE reviewed August 11, 2026
PlaybookImportant
Control hot work from authorization through the final fire watch
OSHA 29 CFR 1910.252: General requirements for welding, cutting, and brazing
Publication date not specified · DSE reviewed August 11, 2026
ChecklistImportant
Keep emergency drenching and flushing reachable in the seconds that matter
OSHA 29 CFR 1910.151: Medical services and first aid
Published June 18, 1998 · DSE reviewed August 11, 2026
PlaybookImportant
Set crowd-safety hold points before opening the doors
OSHA: Crowd Management Safety Guidelines for Retailers
Published November 12, 2014 · DSE reviewed August 11, 2026
PlaybookImportant
Treat AED readiness as a response program, not a cabinet purchase
OSHA: Automated External Defibrillators in the Workplace
Published January 1, 2003 · DSE reviewed August 11, 2026
ChecklistImportant
Walk every exit route from occupied space to safe discharge
OSHA 29 CFR 1910.36 and 1910.37: Exit Routes
Published November 7, 2002 · DSE reviewed August 11, 2026
ONVIF
10 resourcesChecklistAdvisory
“ONVIF compatible” is not enough: verify the exact model, firmware, and profile
ONVIF — Conformant Products
Publication date not specified · DSE reviewed July 19, 2026
GuideAdvisory
ONVIF Profile D: keep access decisions in the right place when integrating peripherals
ONVIF — Profile D
Publication date not specified · DSE reviewed July 19, 2026
GuideAdvisory
ONVIF Profile G acceptance testing for edge recording and retrieval
ONVIF — Profile G
Publication date not specified · DSE reviewed July 19, 2026
ExplainerInformation
ONVIF Profile M: what analytics metadata interoperability does—and does not—prove
ONVIF — Profile M
Publication date not specified · DSE reviewed July 19, 2026
BriefingImportant
ONVIF Profile S support ends March 31, 2027: plan a tested move to Profile T
ONVIF — Profile S Deprecation Q&A
Publication date not specified · DSE reviewed July 19, 2026
BriefingImportant
ONVIF TLS Configuration Add-on v1.0: manage the transition without guessing
ONVIF — TLS Configuration Add-on
Publication date not specified · DSE reviewed July 19, 2026
GuideAdvisory
Plan H.265 adoption around every recorder, client, export path, and investigator
ONVIF Profile T for advanced video streaming
Publication date not specified · DSE reviewed August 17, 2026
ChecklistImportant
Prove Profile A credential and schedule administration end to end
ONVIF Profile A
Publication date not specified · DSE reviewed August 25, 2026
ChecklistImportant
Prove Profile C door commands, state, and alarms as one workflow
ONVIF Profile C
Publication date not specified · DSE reviewed August 25, 2026
ExplainerInformation
Use ONVIF profiles as a requirements map, not a shortcut
ONVIF — ONVIF Profiles
Publication date not specified · DSE reviewed July 19, 2026
owasp.org
2 resourcesChecklistImportant
Test API authorization at object, property, and function boundaries
OWASP API Security Top 10 — 2023
Publication date not specified · DSE reviewed August 25, 2026
GuideAdvisory
Use OWASP ASVS requirement IDs as testable software acceptance criteria
OWASP Application Security Verification Standard project
Publication date not specified · DSE reviewed August 25, 2026
owaspsamm.org
1 resourceGuideAdvisory
Improve software assurance as a measured program with OWASP SAMM
OWASP Software Assurance Maturity Model
Publication date not specified · DSE reviewed August 25, 2026
Ready.gov
4 resourcesPlaybookImportant
Build the hurricane plan around both wind and water dependencies
Ready Business Hurricane Toolkit
Publication date not specified · DSE reviewed August 25, 2026
PlaybookAdvisory
Practice the restart sequence after facility power returns
Ready Business Power Outage Toolkit
Publication date not specified · DSE reviewed August 17, 2026
ChecklistAdvisory
Treat water intrusion as an IT and physical-security outage scenario
Ready Business Inland Flooding Toolkit
Publication date not specified · DSE reviewed August 17, 2026
GuideAdvisory
Turn hazard findings into owned preparedness projects
Ready Business How-To Guide for Small Business Preparedness
Publication date not specified · DSE reviewed August 25, 2026
Security Industry Association
4 resourcesPlaybookAdvisory
A privacy operating model for video surveillance based on SIA’s 2025 Code
Security Industry Association — Data Privacy Code of Practice: Video Surveillance
Publication date not specified · DSE reviewed July 19, 2026
ChecklistAdvisory
Commission a commercial intrusion alarm to resist false dispatches
Security Industry Association: ANSI/SIA CP-01-2019 release announcement
Published July 8, 2019 · DSE reviewed July 28, 2026
ChecklistAdvisory
OSDP commissioning evidence: Verified profiles, Secure Channel, cabling, and load
Security Industry Association — Implementing OSDP Access Control? Follow This Simple Checklist
Published February 10, 2026 · DSE reviewed July 19, 2026
GuideAdvisory
Plan an OSDP Secure Channel migration as a controlled access-system change
Security Industry Association — Open Supervised Device Protocol (OSDP)
Publication date not specified · DSE reviewed July 19, 2026
support.apple.com
2 resourcesGuideAdvisory
Plan for private Wi-Fi addresses before NAC and inventory lose the device
Apple Support: Use private Wi-Fi addresses on Apple devices
Publication date not specified · DSE reviewed August 17, 2026
GuideAdvisory
Test Wi-Fi roaming from the client’s decision point
Wi-Fi roaming support in Apple devices
Publication date not specified · DSE reviewed August 25, 2026
UL Solutions
2 resourcesPlaybookImportant
Build a release matrix for every electrically locked egress door
UL Solutions: Proper Application of UL Standards for Controlled or Delayed Egress Locking Devices—UL 294 & 1034
Published March 5, 2021 · DSE reviewed August 11, 2026
ChecklistImportant
Commission an automatic gate as one safety-and-security system
UL Solutions: Securing Peace of Mind—Access Control and Gate Operators
Published December 2, 2019 · DSE reviewed August 11, 2026
www.911.gov
1 resourcePlaybookImportant
Make every onsite 911 call direct, locatable, and locally visible
National 911 Program: Kari's Law and RAY BAUM's Act
Published March 8, 2023 · DSE reviewed August 11, 2026
www.access-board.gov
4 resourcesGuideImportant
Keep access-control hardware operable for the broadest users
Access Board Guide to Entrances, Doors, and Gates
Publication date not specified · DSE reviewed August 25, 2026
ChecklistImportant
Re-measure door force and closing speed after every hardware change
2010 ADA Standards, Sections 404.2.8 and 404.2.9 — Closing Speed and Opening Force
Publication date not specified · DSE reviewed August 25, 2026
ChecklistImportant
Test automatic access doors in power-off and emergency modes
2010 ADA Standards, Section 404.3 — Automatic and Power-Assisted Doors and Gates
Publication date not specified · DSE reviewed August 25, 2026
GuideImportant
Verify emergency alarms reach people who cannot hear a horn or see a strobe
U.S. Access Board: ADA Accessibility Standards, Section 215 Fire Alarm Systems
Published September 15, 2010 · DSE reviewed August 11, 2026
www.ada.gov
2 resourcesBriefingImportant
Keep at least one restricted entrance accessible where the ADA applies
2010 ADA Standards for Accessible Design, Sections 206.4.7–206.4.8
Published September 15, 2010 · DSE reviewed August 25, 2026
GuideImportant
Make emergency alerts and evacuation workflows accessible by design
Emergency Planning under the Americans with Disabilities Act
Publication date not specified · DSE reviewed August 25, 2026
www.archives.gov
3 resourcesGuideImportant
Keep essential records findable and usable during an outage
Essential Records Guide
Publication date not specified · DSE reviewed August 25, 2026
ChecklistImportant
Keep the records-emergency plan usable without Internet access
Records Emergency Preparedness and Response Toolkit
Publication date not specified · DSE reviewed August 25, 2026
ChecklistImportant
Triage wet records by material, volume, and time
Emergency Salvage of Wet Books and Records
Publication date not specified · DSE reviewed August 25, 2026
www.arin.net
1 resourcePlaybookImportant
Use RPKI route-origin validation without confusing Valid with safe
American Registry for Internet Numbers: Resource Public Key Infrastructure
Publication date not specified · DSE reviewed August 11, 2026
www.cisco.com
2 resourcesPlaybookAdvisory
Protect Layer 2 edges with explicit spanning-tree guardrails
Cisco Borderless Campus 1.0 Design Guide
Publication date not specified · DSE reviewed August 17, 2026
ChecklistAdvisory
Prove the PoE system at its worst moment
Cisco PoE Configuration Guide — Guidelines for PoE
Published September 15, 2025 · DSE reviewed August 4, 2026
www.ecfr.gov
172 resourcesPlaybookAdvisory
Answer nearby public chemical-hazard requests and post-accident meeting duties
40 CFR 68.210 - Availability of information to the public
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Apply cruise-terminal screening rules to covered people, baggage, and property
33 CFR 105.500 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Apply non-power-reactor physical-protection requirements to the actual facility
10 CFR 73.60 - Physical protection at non-power reactors
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Apply passenger and ferry facility controls to unattended vehicles and screening areas
33 CFR 105.285 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Apply Safeguards Information marking and reproduction controls to every copy
10 CFR 73.22 - Protection of Safeguards Information: Specific requirements
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Assign a qualified person or position to manage each covered risk-management process
40 CFR 68.15 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Assign cruise-terminal screening staffing, equipment, and oversight to the owner or operator
33 CFR 105.510 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Assign exclusive-area security duties through written airport-operator agreements
49 CFR 1542.111 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Assign staff, awareness, currency, protection, and usability in the vital-records program
36 CFR 1223.14 - Required vital records program elements
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Audit electrical installations against listing, condition, and working-space requirements
29 CFR 1910.303 - General electrical requirements
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Audit Program 2 compliance and resolve documented findings
40 CFR 68.58 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Audit safety signs and tags for signal word, message, and placement
29 CFR 1910.145 - Specifications for accident prevention signs and tags
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Audit the Facility Security Plan annually and amend it after material change
33 CFR 105.415 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Base the Facility Security Plan on an approved assessment and site-specific operations
33 CFR 105.400 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Build a cruise-terminal screening program around documented procedures and prohibited items
33 CFR 105.505 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Build advance-notice controls for high-significance nuclear shipments
10 CFR 73.72 - Advance notice of covered shipments
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Build critical-access-hospital continuity around rural dependencies
42 CFR 485.625 - Emergency preparedness
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Build emergency readiness around the RNHCI care model
42 CFR 403.748 - Emergency preparedness
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Calculate worst-case toxic and flammable releases using the rule's scenario constraints
40 CFR 68.25 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Carry RMP compliance into air-permit terms and certification
40 CFR 68.215 - Permit content and authority requirements
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Choose credible alternative release scenarios that reach an offsite endpoint
40 CFR 68.28 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Choose vital-record media that can still be read after disruption
36 CFR 1223.18 - Form and format of vital records
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Close the loop on strategic-material shipment departure, arrival, and loss
10 CFR 73.27 - Notification requirements
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Commission fire-detection systems through acceptance, restoration, and maintenance
29 CFR 1910.164 - Fire detection systems
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Compile Program 3 process safety information before hazard analysis
40 CFR 68.65 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Complete a pre-startup safety review before introducing regulated substances
40 CFR 68.77 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Complete fingerprint-based history checks before granting required unescorted airport access
49 CFR 1542.209 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Complete written NRC cyber-event follow-up after telephonic notification
10 CFR 73.77 - Cyber security event notifications
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Connect standard state mitigation plans to funding and risk-reduction decisions
44 CFR 201.4 - Standard State Mitigation Plans
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Consult employees and provide access to Program 2 prevention information
40 CFR 68.62 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Control access to Safeguards Information through need-to-know and authorization
10 CFR 73.21 - Protection of Safeguards Information: Performance requirements
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Control and monitor entry into the airport air operations area
49 CFR 1542.203 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Control compressed-gas acceptance, storage, and handling as one process
29 CFR 1910.101 - Compressed gases
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Control entry to regulated maritime facilities at every MARSEC level
33 CFR 105.255 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Control vessel stores and bunkers from arrival through delivery
33 CFR 105.270 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Coordinate airport incident management with TSA and affected operators
49 CFR 1542.307 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Coordinate emergency-response capabilities annually with local responders
40 CFR 68.93 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Coordinate hospice emergency plans across home and inpatient care
42 CFR 418.113 - Emergency preparedness
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Coordinate MARSEC level changes and implement the approved measures on time
33 CFR 105.230 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Coordinate physical protection for irradiated reactor fuel in transit
10 CFR 73.37 - Irradiated reactor fuel in transit
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Correct RMP accident and emergency-contact data on the rule's clocks
40 CFR 68.195 - Required corrections
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Define secured areas, access systems, law-enforcement support, and contingencies in the airport security program
49 CFR 1542.103 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Define the regulated Facility Security Assessment before drafting the plan
33 CFR 105.300 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Design psychiatric residential emergency plans around youth custody and care
42 CFR 441.184 - Emergency preparedness
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Designate and protect restricted maritime-facility areas based on operations and risk
33 CFR 105.260 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Designate checked-baggage screening space and keep accepted baggage controlled
33 CFR 105.525 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Determine and assess threats after protected-zone intrusion indications
10 CFR 73.50 - Physical protection of licensed activities
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Determine the applicable EPA risk-management program level before relying on prevention controls
40 CFR 68.12 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Distinguish public access areas from secure areas at regulated maritime facilities
33 CFR 105.106 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Document release-scenario assumptions, methods, data, and endpoint results
40 CFR 68.39 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Document the capability claims behind an enhanced state mitigation plan
44 CFR 201.5 - Enhanced State Mitigation Plans
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Document vulnerabilities, countermeasures, and constraints in the Facility Security Assessment
33 CFR 105.305 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Document why energized electrical work could not be avoided
29 CFR 1910.333 - Selection and use of work practices
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Embed reliability, authenticity, integrity, usability, and disposition in electronic records systems
36 CFR 1236.10 - Controls for electronic information systems
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Estimate exposed offsite populations with required census and mapping methods
40 CFR 68.30 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Evaluate contractors and communicate covered-process hazards before work
40 CFR 68.87 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Evaluate reactor physical protection against radiological-sabotage objectives
10 CFR 73.55 - Nuclear power reactor physical protection
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Evaluate records-storage facilities as purpose-built protective environments
36 CFR 1234.10 - Records storage facility requirements
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Exercise maritime-facility security duties through drills and full exercises
33 CFR 105.220 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Exercise the emergency-response program and correct documented weaknesses
40 CFR 68.96 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Find temporary and flexible wiring that has become permanent infrastructure
29 CFR 1910.305 - Wiring methods, components, and equipment
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Give the Facility Security Officer authority, access, and continuous contact coverage
33 CFR 105.205 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Govern unescorted nuclear-facility access through an authorization program
10 CFR 73.56 - Nuclear power plant personnel access authorization
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Identify environmental receptors within the modeled accidental-release endpoint
40 CFR 68.33 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Include sanitation and potable-water dependencies in outage plans
29 CFR 1910.141 - Sanitation
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Inspect and maintain Program 2 process equipment under written procedures
40 CFR 68.56 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Inspect LPG installations as systems, not isolated tanks
29 CFR 1910.110 - Storage and handling of liquefied petroleum gases
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Inspect, test, calibrate, and repair maritime-security systems on schedule
33 CFR 105.250 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Integrate fingerprint-based criminal-history checks into nuclear access decisions
10 CFR 73.57 - Criminal history records checks
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Integrate hospital emergency planning with patient care, utilities, and exercises
42 CFR 482.15 - Emergency preparedness
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Investigate Program 2 incidents promptly and track corrective actions
40 CFR 68.60 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Issue airport identification media with visible scope and accountability controls
49 CFR 1542.211 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Join nuclear cyber protection to safety, security, and emergency systems
10 CFR 73.54 - Digital computer and communication systems
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Keep an airport security coordinator available and accountable for TSA coordination
49 CFR 1542.3 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Keep approved maritime-security compliance documents available and protected
33 CFR 105.120 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Keep labels, safety data sheets, and training synchronized after change
29 CFR 1910.1200 - Hazard Communication
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Keep maritime-security communications available among facilities, vessels, authorities, and personnel
33 CFR 105.235 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Keep NRC physical-protection records linked to the requirement they evidence
10 CFR 73.70 - Records
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Keep PACE participants connected to care during community disruption
42 CFR 460.84 - Emergency preparedness
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Keep Program 2 safety information current for substances, processes, and equipment
40 CFR 68.48 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Keep Program 3 operating procedures accurate, accessible, and annually certified
40 CFR 68.69 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Keep public-access facility exemptions conditional and reachable
33 CFR 105.110 - Exemptions
Publication date not specified · DSE reviewed August 26, 2026
GuideImportant
Keep security-related door and lock maintenance records for HIPAA scope
45 CFR 164.310(a)(2)(iv) — Maintenance records
Publication date not specified · DSE reviewed August 25, 2026
GuideAdvisory
Keep storage aisles clear and stacked materials stable through daily operations
29 CFR 1910.176 - Handling materials
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Layer access, monitoring, and response measures at Certain Dangerous Cargo facilities
33 CFR 105.295 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Limit newly hired employees' secure-area access before TWIC issuance
33 CFR 105.257 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Limit unescorted SIDA access to trained and authorized individuals
49 CFR 1542.205 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Maintain a regulated stationary-source emergency-response program and keep it current
40 CFR 68.95 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Maintain an airport contingency plan for security conditions and disruptions
49 CFR 1542.301 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Maintain electronic-system inventories, documentation, and migration plans
36 CFR 1236.26 - Maintaining electronic information systems
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Make facility security response sustain critical operations and required reporting
33 CFR 105.280 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Make ICF/IID emergency procedures support each client's needs
42 CFR 483.475 - Emergency preparedness
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Make regulated maritime-facility owners accountable for approved-plan operation and security coordination
33 CFR 105.200 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Make the fire-prevention plan name hazards, controls, and owners
29 CFR 1910.39 - Fire prevention plans
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Map industrial ventilation controls to the operation they actually cover
29 CFR 1910.94 - Ventilation
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Monitor maritime approaches, access points, restricted areas, and waterside activity
33 CFR 105.275 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Notify the NRC within 15 minutes of specified physical-security threats
10 CFR 73.1200 - Notification of physical security events
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Notify TSA and protect operations when changed conditions affect airport security
49 CFR 1542.107 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Obtain TSA approval before implementing airport security-program amendments
49 CFR 1542.105 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Operate a TSA-approved airport security program for covered operations
49 CFR 1542.101 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Plan ambulatory-surgery continuity around same-day patient risk
42 CFR 416.54 - Emergency preparedness
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Plan CORF continuity around time-sensitive outpatient rehabilitation
42 CFR 485.68 - Emergency preparedness
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Plan electric-power facility work around the rule's emergency and access controls
29 CFR 1910.269 - Electric power generation, transmission, and distribution
Publication date not specified · DSE reviewed August 26, 2026
PlaybookImportant
Plan emergency facility access for HIPAA contingency operations
45 CFR 164.310(a)(2)(i) — Contingency operations
Publication date not specified · DSE reviewed August 25, 2026
GuideAdvisory
Plan rural clinic and FQHC continuity with community partners
42 CFR 491.12 - Emergency preparedness
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Preplan hazardous-substance emergency response by role and hazard
29 CFR 1910.120 - Hazardous waste operations and emergency response
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Preselect a backup employee-warning method for alarm outages
29 CFR 1910.165 - Employee alarm systems
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Preserve community mental health services through disruption
42 CFR 485.727 - Emergency preparedness
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Preserve records of airport law-enforcement actions and response times
49 CFR 1542.221 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Preserve tribal authority and participation throughout mitigation planning
44 CFR 201.7 - Tribal Mitigation Plans
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Prevent and detect unauthorized entry into airport secured areas
49 CFR 1542.201 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Prevent split nuclear shipments from bypassing aggregate protection thresholds
10 CFR 73.24 - Prohibitions
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Prioritize home-health patients when services are interrupted
42 CFR 484.102 - Emergency preparedness
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Protect and implement TSA Security Directives within required time and distribution limits
49 CFR 1542.303 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Protect and retain maritime-facility drill, incident, maintenance, and access records
33 CFR 105.225 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Protect dialysis patients when treatment sites or utilities fail
42 CFR 494.62 - Emergency preparedness
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Protect export shipments of low-significance special nuclear material
10 CFR 73.73 - Export shipments of low-significance special nuclear material
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Protect long-term-care residents through shelter, evacuation, and continuity planning
42 CFR 483.73 - Emergency preparedness
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Protect stored spent fuel and high-level waste as a distinct facility mission
10 CFR 73.51 - Stored spent fuel and high-level radioactive waste
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Prove permit-space isolation, entry, rescue, and cancellation workflows
29 CFR 1910.146 - Permit-required confined spaces
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Provide documented seafarer, visitor, and welfare access through regulated maritime facilities
33 CFR 105.237 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Provide law-enforcement support for airport security and response
49 CFR 1542.215 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Publish and control a prohibited-items list for cruise-terminal screening
33 CFR 105.515 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Put a licensed fire-protection engineer over records-storage system design
36 CFR 1234.12 - Records storage fire safety
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Put duties, access controls, communications, and response procedures into the Facility Security Plan
33 CFR 105.405 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Reconcile flammable-liquid storage rooms, cabinets, and transfer points
29 CFR 1910.106 - Flammable liquids
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Record covered accidental releases and their onsite and offsite consequences
40 CFR 68.42 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Require tenant security programs to preserve the airport program's protection
49 CFR 1542.113 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Reserve safety colors for the hazards the rule assigns
29 CFR 1910.144 - Safety color code for marking physical hazards
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Revalidate Program 3 process hazard analyses and resolve recommendations
40 CFR 68.67 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Review nuclear safety changes for adverse security effects and vice versa
10 CFR 73.58 - Safety and security interface
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Scale fixed-site and transit protection to special nuclear material significance
10 CFR 73.67 - Special nuclear material of moderate and low strategic significance
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Screen people, baggage, and stores entering cruise-ship terminals
33 CFR 105.290 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Secure barge-fleeting facilities through access, monitoring, and response controls
33 CFR 105.296 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Select, test, and maintain cruise-terminal screening equipment for its approved use
33 CFR 105.545 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Separate emergency operating records from legal and financial rights records
36 CFR 1223.12 - Objectives of a vital records program
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Separate modified-handling Safeguards Information from ordinary sensitive records
10 CFR 73.23 - Safeguards Information-Modified Handling
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Set cruise-terminal screener qualifications and fitness requirements before assignment
33 CFR 105.530 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Set qualification, training, and conduct standards for airport law-enforcement personnel
49 CFR 1542.217 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Set records-storage environmental controls by media and retention need
36 CFR 1234.14 - Records storage environmental controls
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Stage electrical safeguards before maintenance begins
29 CFR 1910.335 - Safeguards for personnel protection
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Submit system-specific records-storage fire certification evidence to NARA
36 CFR 1234.32 - Fire-safety system certification
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Submit the Facility Security Assessment with protected supporting information
33 CFR 105.310 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Submit, protect, and implement the Facility Security Plan only after approval
33 CFR 105.410 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Supplement airport law-enforcement staffing only under approved procedures
49 CFR 1542.219 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Teach other maritime-facility personnel to recognize and report security threats
33 CFR 105.215 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Test energy-control procedures at the equipment they protect
29 CFR 1910.147 - Control of hazardous energy
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Tie powered-industrial-truck authorization to training and equipment condition
29 CFR 1910.178 - Powered industrial trucks
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Train airport personnel before granting unescorted security-area access
49 CFR 1542.213 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Train and test rural emergency hospital personnel for emergency preparedness
42 CFR 485.542 - Emergency preparedness
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Train and verify Program 2 operators before independent process work
40 CFR 68.54 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Train cruise-terminal screeners before independent screening duties
33 CFR 105.535 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Train maritime-facility security personnel for assigned duties and changing threat levels
33 CFR 105.210 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Translate the NRC physical-protection performance objective into testable outcomes
10 CFR 73.20 - General performance objective and requirements
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Treat fixed-site protection-plan submission and implementation dates as historical requirements
10 CFR 73.46 - Fixed site physical protection systems
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Turn local mitigation plans into prioritized, maintained risk-reduction programs
44 CFR 201.6 - Local Mitigation Plans
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Turn walking-surface inspections into tracked facility repairs
29 CFR 1910.22 - General requirements
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Update the regulated risk-management plan after process changes and five-year review points
40 CFR 68.190 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Use a documented Program 2 hazard review to identify safeguards and needed changes
40 CFR 68.50 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Use an Alternative Security Program only within its approved scope and conditions
33 CFR 105.140 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Use an independent third party when EPA requires a Program 2 compliance audit
40 CFR 68.59 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Use Coast Guard risk groups to determine required maritime-facility measures
33 CFR 105.253 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Use Declarations of Security to assign shared facility-vessel security duties
33 CFR 105.245 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Use process-safety information to drive facility continuity decisions
29 CFR 1910.119 - Process safety management of highly hazardous chemicals
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Use required weather and release assumptions in offsite consequence analysis
40 CFR 68.22 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Use written management-of-change controls before modifying covered processes
40 CFR 68.75 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Validate exit-route capacity and permanence before occupancy changes
29 CFR 1910.36 - Design and construction requirements for exit routes
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Verify cargo before handling and protect it from tampering at regulated facilities
33 CFR 105.265 -- Maritime Security: Facilities
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Verify the respiratory-protection program beyond respirator inventory
29 CFR 1910.134 - Respiratory protection
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Verify transportation physical-protection subsystems as an integrated whole
10 CFR 73.26 - Transportation physical protection systems
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Withdraw airport access immediately and tightly control temporary credentials
49 CFR 1542.207 -- Airport Security
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Write Program 2 operating procedures for startup, shutdown, upset, and emergency conditions
40 CFR 68.52 -- Chemical Accident Prevention Provisions
Publication date not specified · DSE reviewed August 26, 2026
www.epa.gov
1 resourceChecklistImportant
Prepare commercial buildings for wildfire smoke before air quality deteriorates
Wildfires and Indoor Air Quality in Schools and Commercial Buildings
Published August 20, 2026 · DSE reviewed August 25, 2026
www.federalreserve.gov
1 resourceGuideAdvisory
Bank physical security annual review: evidence for the board report
Federal Reserve Regulation H: 12 CFR 208.61
Published July 28, 2026 · DSE reviewed July 28, 2026
www.ffiec.gov
1 resourcePlaybookImportant
Turn FFIEC authentication guidance into a layered-control evidence plan
FFIEC — Authentication and Access to Financial Institution Services and Systems
Published August 11, 2021 · DSE reviewed August 4, 2026
www.finops.org
1 resourcePlaybookAdvisory
Allocate cloud cost before asking teams to optimize it
FinOps Foundation Framework: Allocation
Publication date not specified · DSE reviewed August 11, 2026
www.first.org
3 resourcesExplainerAdvisory
Use CVSS v4.0 as structured severity context—not a patch queue
FIRST Common Vulnerability Scoring System v4.0 Specification
Published November 1, 2023 · DSE reviewed August 25, 2026
ExplainerAdvisory
Use EPSS as a changing exploitation forecast—not a complete risk score
FIRST Exploit Prediction Scoring System FAQ
Publication date not specified · DSE reviewed August 25, 2026
GuideAdvisory
Use TLP 2.0 to preserve the sharing boundary of incident information
FIRST: Traffic Light Protocol Version 2.0
Publication date not specified · DSE reviewed August 11, 2026
www.gsa.gov
1 resourceChecklistAdvisory
Commission intercoms as audio, identity, network, and escalation systems
GSA Solicitation for Offers: Entry security intercom and remote entry control provisions
Publication date not specified · DSE reviewed August 17, 2026
www.ic3.gov
1 resourcePlaybookImportant
Stop business email compromise at the payment process
FBI Internet Crime Complaint Center: Business Email Compromise
Publication date not specified · DSE reviewed July 28, 2026
www.microsoft.com
3 resourcesPlaybookImportant
Enforce approval outside the model before an AI agent commits a consequential action
Microsoft Security: Defense in depth for autonomous AI agents
Published May 14, 2026 · DSE reviewed August 17, 2026
PlaybookImportant
Log AI tool calls as privileged operations—not just chat transcripts
Microsoft Security: From runtime risk to real-time defense
Published January 23, 2026 · DSE reviewed August 17, 2026
GuideImportant
Set retention, deletion, and tenant boundaries before an AI assistant remembers
Microsoft Security: Guarding AI memory
Published June 22, 2026 · DSE reviewed August 17, 2026
www.ncsc.govt.nz
1 resourceChecklistImportant
Bound an AI agent’s authority before it can act on business systems
Joint Cybersecurity Guidance: Careful Adoption of Agentic AI Services
Published May 1, 2026 · DSE reviewed July 28, 2026
www.ojp.gov
1 resourcePlaybookAdvisory
Preserve an incident scene before ordinary operations erase the evidence
U.S. Department of Justice: Crime Scene Investigation—A Guide for Law Enforcement
Published September 1, 2013 · DSE reviewed August 11, 2026
www.rfc-editor.org
161 resourcesBriefingAdvisory
Accept DNS configuration from IPv6 router advertisements only within option lifetimes
RFC 8106 — IPv6 Router Advertisement Options for DNS Configuration
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Accept UTF-8 headers only under internationalized mail syntax
RFC 6532 — Internationalized Email Headers
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Advertise BGP capabilities in OPEN before using an optional feature
RFC 5492 — Capabilities Advertisement with BGP-4
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Advertise OSPF maximum metrics when a router must remain non-transit
RFC 6987 — OSPF Stub Router Advertisement
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Aggregate SMTP TLS policy outcomes into daily JSON reports
RFC 8460 — SMTP TLS Reporting
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Allocate BGP Large Community fields before encoding policy
RFC 8092 — BGP Large Communities Attribute
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Apply BGP path selection before advertising a chosen route
RFC 4271 — A Border Gateway Protocol 4 (BGP-4)
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Apply DNAME substitution below an owner without aliasing the owner itself
RFC 6672 — DNAME Redirection in the DNS
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Apply SRV priority before weight when selecting a service endpoint
RFC 2782 — A DNS RR for specifying the location of services (DNS SRV)
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Apply the IDNA bidirectional rule before accepting right-to-left labels
RFC 5893 — Right-to-Left Scripts for Internationalized Domain Names for Applications (IDNA)
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Assign forward and reverse DNS updates between DHCPv4 client and server
RFC 4702 — The Dynamic Host Configuration Protocol (DHCP) Client Fully Qualified Domain Name (FQDN) Option
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Audit DNS serials, MX targets, and delegation glue for common errors
RFC 1912 — Common DNS Operational and Configuration Errors
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Authenticate a complete DNS transaction with SIG(0), not a single RRset
RFC 2931 — DNS Request and Transaction Signatures ( SIG(0)s )
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Authorize secure DNS UPDATE operations at the zone boundary
RFC 3007 — Secure Domain Name System (DNS) Dynamic Update
Publication date not specified · DSE reviewed August 26, 2026
GuideInformation
Baseline delay, loss, and delay variation before a network complaint becomes guesswork
IETF RFC 2330: Framework for IP Performance Metrics
Publication date not specified · DSE reviewed August 17, 2026
ExplainerAdvisory
Batch JMAP calls while preserving state-token and error semantics
RFC 8620 — The JSON Meta Application Protocol (JMAP)
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Bind QUIC packet-protection keys to the correct TLS encryption level
RFC 9001 — Using TLS to Secure QUIC
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Bind SMTP TLS endpoints to DNSSEC-authenticated TLSA records
RFC 7672 — SMTP Security via Opportunistic DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS)
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Bound AXFR to a complete SOA-delimited zone transfer over TCP
RFC 5936 — DNS Zone Transfer Protocol (AXFR)
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Bound carrier-grade NAT resources, logging, and port allocation
RFC 6888 — Common Requirements for Carrier-Grade NATs (CGNs)
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Bound HTTP/2 streams with flow control and connection error handling
RFC 9113 — HTTP/2
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Bound NXDOMAIN and NODATA caching from SOA data
RFC 2308 — Negative Caching of DNS Queries (DNS NCACHE)
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Bound QPACK decoder blocking while compressing HTTP/3 fields
RFC 9204 — QPACK: Field Compression for HTTP/3
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Bound UDP datagrams and congestion response before adding reliability
RFC 8085 — UDP Usage Guidelines
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Bracket route refresh updates so peers can reconcile stale state
RFC 7313 — Enhanced Route Refresh Capability for BGP-4
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Build IPFIX flow telemetry you can trust before an incident
IETF RFC 7011: Specification of the IP Flow Information Export (IPFIX) Protocol for the Exchange of Flow Information
Publication date not specified · DSE reviewed August 17, 2026
GuideAdvisory
Canonicalize IPv6 text before comparing or logging addresses
RFC 5952 — A Recommendation for IPv6 Address Text Representation
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Cap resolver retries that amplify failures into unnecessary query load
RFC 4697 — Observed DNS Resolution Misbehavior
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Challenge suspicious TCP resets, SYNs, and data before aborting a connection
RFC 5961 — Improving TCP's Robustness to Blind In-Window Attacks
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Choose strict, feasible, or loose uRPF for asymmetric routing paths
RFC 3704 — Ingress Filtering for Multihomed Networks
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Classify IPv6 unicast, anycast, and multicast addresses before policy
RFC 4291 — IP Version 6 Addressing Architecture
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Classify Unicode code points before admitting them to an IDNA label
RFC 5892 — The Unicode Code Points and Internationalized Domain Names for Applications (IDNA)
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Compare DNS labels case-insensitively while preserving original case
RFC 4343 — Domain Name System (DNS) Case Insensitivity Clarification
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Complete the WebSocket opening handshake before processing data frames
RFC 6455 — The WebSocket Protocol
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Compute the TCP retransmission timeout from measured round-trip time
RFC 6298 — Computing TCP's Retransmission Timer
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Constrain Sieve filters to explicit tests, bounded actions, and implicit keep
RFC 5228 — Sieve: An Email Filtering Language
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Contain malformed BGP UPDATE attributes with the specified recovery action
RFC 7606 — Revised Error Handling for BGP UPDATE Messages
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Decode encoded-words only where message header syntax allows them
RFC 2047 — MIME (Multipurpose Internet Mail Extensions) Part Three: Message Header Extensions for Non-ASCII Text
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Define interface-counter semantics before alerting on errors
RFC 2863: The Interfaces Group MIB
Publication date not specified · DSE reviewed August 25, 2026
PlaybookAdvisory
Design multicast video with controlled group membership and tested fallback
RFC 4541: IGMP and MLD snooping switch considerations
Publication date not specified · DSE reviewed August 17, 2026
ChecklistAdvisory
Discover mail endpoints through service-specific SRV records
RFC 6186 — Use of SRV Records for Locating Email Submission/Access Services
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Drive QUIC loss detection from acknowledgments without conflating congestion control
RFC 9002 — QUIC Loss Detection and Congestion Control
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Drop source addresses that cannot legitimately arrive on an ingress interface
RFC 2827 — Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Emit machine-readable message and recipient delivery-status fields
RFC 3464 — An Extensible Message Format for Delivery Status Notifications
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Enable DNSSEC validation without mistaking authentication for encryption
IETF RFC 9364: DNS Security Extensions (DNSSEC)
Publication date not specified · DSE reviewed August 17, 2026
ExplainerAdvisory
Enable QNAME minimisation as one DNS privacy layer
RFC 9156: DNS Query Name Minimisation to Improve Privacy
Publication date not specified · DSE reviewed August 25, 2026
BriefingAdvisory
Enforce HTTP/3 control-stream and request-stream roles over QUIC
RFC 9114 — HTTP/3
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Enforce MTA-STS only after retrieving and authenticating domain policy
RFC 8461 — SMTP MTA Strict Transport Security (MTA-STS)
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Establish DNS shared keys only through an explicit TKEY exchange mode
RFC 2930 — Secret Key Establishment for DNS (TKEY RR)
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Establish GSS-TSIG context keys without confusing them with zone data
RFC 3645 — Generic Security Service Algorithm for Secret Key Transaction Authentication for DNS (GSS-TSIG)
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Filter private IPv4 prefixes at public routing boundaries
RFC 1918 — Address Allocation for Private Internets
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Gate HTTP early data on replay-safe request semantics
RFC 8470 — Using Early Data in HTTP
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Generate and route ULAs without leaking them as global IPv6 space
RFC 4193 — Unique Local IPv6 Unicast Addresses
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Generate ICMPv6 errors without replying to prohibited packet classes
RFC 4443 — Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6 (IPv6) Specification
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Govern 32-bit BGP communities as transitive routing policy tags
RFC 1997 — BGP Communities Attribute
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Honor HSTS only after a valid HTTPS response establishes policy
RFC 6797 — HTTP Strict Transport Security (HSTS)
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Identify the answering server instance behind a shared DNS address
RFC 4892 — Requirements for a Mechanism Identifying a Name Server Instance
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Ignore ICMP Source Quench as a congestion-control signal
RFC 6633 — Deprecation of ICMP Source Quench Messages
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Interpret Content-Disposition separately from media type and filename safety
RFC 2183 — Communicating Presentation Information in Internet Messages: The Content-Disposition Header Field
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Interpret Link relation types without dereferencing every target
RFC 8288 — Web Linking
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Keep confederation-internal AS paths from leaking beyond the confederation
RFC 5065 — Autonomous System Confederations for BGP
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Keep documentation and test names inside reserved namespaces
RFC 2606 — Reserved Top Level DNS Names
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Keep JMAP mail objects in separate method families
RFC 8621 — The JSON Meta Application Protocol (JMAP) for Mail
Publication date not specified · DSE reviewed August 26, 2026
BriefingImportant
Keep RFC 2544 overload tests inside an isolated lab
RFC 6815: Applicability Statement for RFC 2544: Use on Production Networks Considered Harmful
Publication date not specified · DSE reviewed August 25, 2026
PlaybookImportant
Make eBGP default-reject a tested policy, not a surprise outage
RFC 8212: Default External BGP Route Propagation Behavior without Policies
Publication date not specified · DSE reviewed August 25, 2026
GuideAdvisory
Make every security event tell the same time
RFC 8633 — Network Time Protocol Best Current Practices
Publication date not specified · DSE reviewed August 4, 2026
ChecklistAdvisory
Map DNS packet, server, and data threats to the protection each needs
RFC 3833 — Threat Analysis of the Domain Name System (DNS)
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Map each six-bit DSCP to a configured per-hop behavior
RFC 2474 — Definition of the Differentiated Services Field (DS Field) in the IPv4 and IPv6 Headers
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Match replies to outstanding DNS queries before accepting an answer
RFC 5452 — Measures for Making DNS More Resilient against Forged Answers
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Measure TCP throughput with the path conditions that shape it
RFC 6349: Framework for TCP Throughput Testing
Publication date not specified · DSE reviewed August 25, 2026
PlaybookAdvisory
Migrate monitoring to SNMPv3 without losing the alerts operations depend on
RFC 3414: User-based Security Model for SNMPv3
Publication date not specified · DSE reviewed August 17, 2026
ChecklistImportant
Monitor DNSSEC trust-anchor rollover as a resolver lifecycle
RFC 5011: Automated Updates of DNS Security (DNSSEC) Trust Anchors
Publication date not specified · DSE reviewed August 25, 2026
ExplainerAdvisory
Negotiate Add-Path before advertising multiple paths for one prefix
RFC 7911 — Advertisement of Multiple Paths in BGP
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Negotiate each BGP address family before exchanging reachability
RFC 4760 — Multiprotocol Extensions for BGP-4
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Negotiate ECN before treating congestion marks as transport signals
RFC 3168 — The Addition of Explicit Congestion Notification (ECN) to IP
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Negotiate EDNS UDP size and extended fields through the OPT pseudo-record
RFC 6891 — Extension Mechanisms for DNS (EDNS(0))
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Negotiate requested DSN outcomes and returned content at SMTP time
RFC 3461 — Simple Mail Transfer Protocol (SMTP) Service Extension for Delivery Status Notifications (DSNs)
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Negotiate SMTP STARTTLS without implying authenticated delivery
RFC 3207 — SMTP Service Extension for Secure SMTP over Transport Layer Security
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Negotiate SMTPUTF8 before transporting internationalized addresses
RFC 6531 — SMTP Extension for Internationalized Email
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Parse and serialize HTTP Structured Fields as ordered typed values
RFC 9651 — Structured Field Values for HTTP
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Parse enhanced mail status codes into class, subject, and detail
RFC 3463 — Enhanced Mail System Status Codes
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Parse extended ICMP objects only after the original datagram and length fields
RFC 4884 — Extended ICMP to Support Multi-Part Messages
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Parse IPv6 extension headers without assuming a fixed upper-layer offset
RFC 8200 — Internet Protocol, Version 6 (IPv6) Specification
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Parse multipart boundaries before interpreting nested MIME media types
RFC 2046 — Multipurpose Internet Mail Extensions (MIME) Part Two: Media Types
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Place authoritative DNS secondaries across independent failure domains
RFC 2182 — Selection and Operation of Secondary DNS Servers
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Preserve internationalized addresses in delivery and disposition reports
RFC 6533 — Internationalized Delivery Status and Disposition Notifications
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Preserve unknown DNS record types through generic presentation syntax
RFC 3597 — Handling of Unknown DNS Resource Record (RR) Types
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Prevent route-reflector loops with cluster and originator attributes
RFC 4456 — BGP Route Reflection: An Alternative to Full Mesh Internal BGP (IBGP)
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Probe a specific interface with ICMP Extended Echo under authorization
RFC 8335 — PROBE: A Utility for Probing Interfaces
Publication date not specified · DSE reviewed August 26, 2026
GuideImportant
Protect syslog in transit without mistaking TLS for log durability
RFC 5425: Transport Layer Security (TLS) Transport Mapping for Syslog
Publication date not specified · DSE reviewed August 25, 2026
ChecklistAdvisory
Prove DHCP renewal and rebinding before shortening lease time
RFC 2131: Dynamic Host Configuration Protocol
Publication date not specified · DSE reviewed August 25, 2026
ChecklistImportant
Prove VRRP failover from the client path, not the master-state display
RFC 5798: Virtual Router Redundancy Protocol Version 3 for IPv4 and IPv6
Publication date not specified · DSE reviewed August 25, 2026
ChecklistAdvisory
Publish AAAA and IP6.ARPA data as separate forward and reverse decisions
RFC 3596 — DNS Extensions to Support IP Version 6
Publication date not specified · DSE reviewed August 26, 2026
PlaybookImportant
Publish CAA only after mapping every legitimate certificate issuer
RFC 8659: DNS Certification Authority Authorization (CAA) Resource Record
Publication date not specified · DSE reviewed August 25, 2026
GuideImportant
Qualify EAP-TLS 1.3 across supplicants, RADIUS, and certificates
RFC 9190: EAP-TLS 1.3
Publication date not specified · DSE reviewed August 25, 2026
PlaybookAdvisory
Race IPv6 and IPv4 connection attempts from one interleaved candidate list
RFC 8305 — Happy Eyeballs Version 2: Better Connectivity Using Concurrency
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Rank DNS data credibility before caching conflicting answers
RFC 2181 — Clarifications to the DNS Specification
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Record authentication evaluations at the receiving trust boundary
RFC 8601 — Message Header Field for Indicating Message Authentication Status
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Refuse to treat a DNS name as a stable or trustworthy identifier
RFC 4367 — What's in a Name: False Assumptions about DNS Names
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Reject ambiguous HTTP/1.1 message framing at every intermediary
RFC 9112 — HTTP/1.1
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Reject authoritative implementations that mishandle AAAA query responses
RFC 4074 — Common Misbehavior Against DNS Queries for IPv6 Addresses
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Request and interpret EDNS NSID without assigning it global semantics
RFC 5001 — DNS Name Server Identifier (NSID) Option
Publication date not specified · DSE reviewed August 26, 2026
GuideImportant
Require exact redirect matching and PKCE in OAuth authorization-code flows
RFC 9700 — Best Current Practice for OAuth 2.0 Security
Publication date not specified · DSE reviewed August 25, 2026
ChecklistAdvisory
Require patch-format support before applying a partial resource change
RFC 5789 — PATCH Method for HTTP
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Require the HTTPS POST contract before offering one-click unsubscribe
RFC 8058 — Signaling One-Click Functionality for List Email Headers
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Require transparent DNS proxy behavior through broadband gateways
RFC 5625 — DNS Proxy Implementation Guidelines
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Reserve special-use names only after evaluating every affected software role
RFC 6761 — Special-Use Domain Names
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Resolve DHCP name conflicts against the existing DHCID identity
RFC 4703 — Resolution of Fully Qualified Domain Name (FQDN) Conflicts among Dynamic Host Configuration Protocol (DHCP) Clients
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Resolve link-local names with mDNS probing, scope, and response rules
RFC 6762 — Multicast DNS
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Resolve relative URI references before applying application routing
RFC 3986 — Uniform Resource Identifier (URI): Generic Syntax
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Return HTTP API failures as typed Problem Details
RFC 9457 — Problem Details for HTTP APIs
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Reuse cached HTTP responses only after freshness and validation checks
RFC 9111 — HTTP Caching
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Rotate TCP-AO keys without breaking authenticated connection segments
RFC 5925 — The TCP Authentication Option
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Rotate temporary IPv6 addresses within lifetime and regeneration bounds
RFC 8981 — Temporary Address Extensions for Stateless Address Autoconfiguration in IPv6
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Round-trip Unicode labels through Punycode without display-policy assumptions
RFC 3492 — Punycode: A Bootstring encoding of Unicode for Internationalized Domain Names in Applications (IDNA)
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Run duplicate-address detection before assigning a SLAAC address
RFC 4862 — IPv6 Stateless Address Autoconfiguration
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Scope cookies by domain, path, security attributes, and storage rules
RFC 6265 — HTTP State Management Mechanism
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Scope OSPFv3 packets and LSAs correctly on IPv6 links
RFC 5340 — OSPF for IPv6
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Separate authenticated message submission policy from SMTP relay handling
RFC 6409 — Message Submission for Mail
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Separate Diffserv edge conditioning from core per-hop forwarding
RFC 2475 — An Architecture for Differentiated Services
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Separate DNS-SD enumeration from SRV reachability and TXT metadata
RFC 6763 — DNS-Based Service Discovery
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Separate IPv6 router discovery, address resolution, and reachability
RFC 4861 — Neighbor Discovery for IP version 6 (IPv6)
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Separate QUIC connection IDs, packet numbers, and stream flow control
RFC 9000 — QUIC: A UDP-Based Multiplexed and Secure Transport
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Separate SMTP envelope state from message content while relaying mail
RFC 5321 — Simple Mail Transfer Protocol
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Serve designated private reverse zones locally to stop query leakage
RFC 6303 — Locally Served DNS Zones
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Serve stale DNS data only inside explicit freshness and failure limits
RFC 8767 — Serving Stale Data to Improve DNS Resiliency
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Set IDNA2008 terminology and protocol boundaries before implementation
RFC 5890 — Internationalized Domain Names for Applications (IDNA): Definitions and Document Framework
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Set JSON parser policy for UTF-8, duplicate names, and nonstandard extensions
RFC 8259 — The JavaScript Object Notation (JSON) Data Interchange Format
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Sign only declared HTTP components with complete signature metadata
RFC 9421 — HTTP Message Signatures
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Stage first-hop source validation without stranding legitimate devices
IETF RFC 7513: Source Address Validation Improvement (SAVI) Solution for DHCP
Publication date not specified · DSE reviewed August 17, 2026
BriefingAdvisory
Stop fast DNS retries and recursion loops identified by RFC 1536
RFC 1536 — Common DNS Implementation Errors and Suggested Fixes
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Synchronize IMAP state without treating sequence numbers as stable IDs
RFC 9051 — Internet Message Access Protocol (IMAP) - Version 4rev2
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Synchronize OSPFv2 link-state databases before shortest-path calculation
RFC 2328 — OSPF Version 2
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Synthesize DNS64 AAAA answers only under the defined A-record conditions
RFC 6147 — DNS64: DNS Extensions for Network Address Translation from IPv6 Clients to IPv4 Servers
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Synthesize wildcard answers only from the closest encloser
RFC 4592 — The Role of Wildcards in the Domain Name System
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Test Path MTU across tunnels and cloud edges before applications stall
IETF RFC 8899: Packetization Layer Path MTU Discovery for Datagram Transports
Published September 1, 2020 · DSE reviewed August 11, 2026
ChecklistAdvisory
Test RTSP session survival across firewalls and idle periods
RFC 7826 - Real-Time Streaming Protocol Version 2.0
Publication date not specified · DSE reviewed August 25, 2026
ExplainerAdvisory
Test UDP NAT mapping and filtering behavior separately
RFC 4787 — Network Address Translation (NAT) Behavioral Requirements for Unicast UDP
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Translate TCP resets while preventing rejected traffic from refreshing NAT state
RFC 7857 — Updates to Network Address Translation (NAT) Behavioral Requirements
Publication date not specified · DSE reviewed August 26, 2026
ExplainerImportant
Treat SRTP as stream protection, not complete VMS security
RFC 3711 - The Secure Real-time Transport Protocol
Publication date not specified · DSE reviewed August 25, 2026
GuideAdvisory
Trigger secondary refresh checks with NOTIFY without treating notice as transfer
RFC 1996 — A Mechanism for Prompt Notification of Zone Changes (DNS NOTIFY)
Publication date not specified · DSE reviewed August 26, 2026
GuideImportant
Tune BFD for the failure you need to detect—not the smallest timer
RFC 5880: Bidirectional Forwarding Detection
Publication date not specified · DSE reviewed August 25, 2026
PlaybookAdvisory
Tune IPv6 source and destination selection with explicit policy labels
RFC 6724 — Default Address Selection for Internet Protocol Version 6 (IPv6)
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Use /127 only on inter-router point-to-point IPv6 links
RFC 6164 — Using 127-Bit IPv6 Prefixes on Inter-Router Links
Publication date not specified · DSE reviewed August 26, 2026
GuideImportant
Use BGP Roles and OTC only after both sides agree on the relationship
RFC 9234: Route Leak Prevention and Detection Using Roles in UPDATE and OPEN Messages
Publication date not specified · DSE reviewed August 25, 2026
PlaybookAdvisory
Use DHCID data to identify competing DHCP ownership claims
RFC 4701 — A DNS Resource Record (RR) for Encoding Dynamic Host Configuration Protocol (DHCP) Information (DHCID RR)
Publication date not specified · DSE reviewed August 26, 2026
BriefingAdvisory
Use IXFR only when a secondary serial can anchor an incremental change
RFC 1995 — Incremental Zone Transfer in DNS
Publication date not specified · DSE reviewed August 26, 2026
PlaybookImportant
Use NETCONF confirmed commit only with a rehearsed confirmation path
RFC 6241: Network Configuration Protocol (NETCONF)
Publication date not specified · DSE reviewed August 25, 2026
ExplainerAdvisory
Use RTCP loss and jitter as transport evidence, not image proof
RFC 3550 - RTP: A Transport Protocol for Real-Time Applications
Publication date not specified · DSE reviewed August 25, 2026
ChecklistAdvisory
Use service-facing DNS aliases without treating aliases as service discovery
RFC 2219 — Use of DNS Aliases for Network Services
Publication date not specified · DSE reviewed August 26, 2026
ChecklistAdvisory
Validate BGP egress against the effective origin AS after outbound policy
RFC 8893 — Resource Public Key Infrastructure (RPKI) Origin Validation for BGP Export
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Validate DNS UPDATE prerequisites before applying zone additions or deletions
RFC 2136 — Dynamic Updates in the Domain Name System (DNS UPDATE)
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Validate each ARC set and chain state before trusting intermediary results
RFC 8617 — The Authenticated Received Chain (ARC) Protocol
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Validate host IP, UDP, and TCP duties at their layer boundaries
RFC 1122 — Requirements for Internet Hosts - Communication Layers
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Validate HTTP method and status semantics independently of wire version
RFC 9110 — HTTP Semantics
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Validate IDNA registration and lookup as separate processing paths
RFC 5891 — Internationalized Domain Names in Applications (IDNA): Protocol
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Validate Internet message syntax independently of SMTP transport
RFC 5322 — Internet Message Format
Publication date not specified · DSE reviewed August 26, 2026
ExplainerAdvisory
Validate IPv4 router forwarding and ICMP behavior at the hop boundary
RFC 1812 — Requirements for IP Version 4 Routers
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Validate MIME content headers and transfer encoding before decoding bodies
RFC 2045 — Multipurpose Internet Mail Extensions (MIME) Part One: Format of Internet Message Bodies
Publication date not specified · DSE reviewed August 26, 2026
GuideAdvisory
Validate TCP state transitions from handshake through close
RFC 9293 — Transmission Control Protocol (TCP)
Publication date not specified · DSE reviewed August 26, 2026
PlaybookAdvisory
Verify DNS Cookies before granting the server-cookie trust benefit
RFC 7873 — Domain Name System (DNS) Cookies
Publication date not specified · DSE reviewed August 26, 2026
www.spaceweather.gov
1 resourceGuideAdvisory
Map space-weather dependencies before GPS, radio, or satellite service degrades
NOAA Space Weather Scales
Publication date not specified · DSE reviewed August 25, 2026
www.usfa.fema.gov
1 resourceChecklistAdvisory
Set fire and EMS devolution and reconstitution triggers before resources run short
Essential Services and Devolution Planning for Fire and EMS
Published May 1, 2026 · DSE reviewed August 26, 2026
www.usgs.gov
2 resourcesGuideImportant
Predefine safe actions before integrating ShakeAlert
Earthquake Early Warning - Overview
Published March 9, 2022 · DSE reviewed August 25, 2026
GuideImportant
Restrain nonstructural technology equipment for the site’s seismic risk
Earthquake Facts & Earthquake Fantasy
Publication date not specified · DSE reviewed August 25, 2026
www.uspis.gov
1 resourceChecklistImportant
Route suspicious mail into isolation, distance, and coordinated reporting
United States Postal Inspection Service: Suspicious Mail Guidance and Poster 84
Published September 1, 2006 · DSE reviewed August 11, 2026
www.wbdg.org
2 resourcesGuideAdvisory
Commission exterior security lighting for the people who must use and maintain it
DoD UFC 3-530-01: Interior and Exterior Lighting Systems and Controls, Change 1
Published December 15, 2023 · DSE reviewed August 11, 2026
ChecklistAdvisory
Inspect the fence line as one continuous perimeter—including the openings below it
DoD UFC 4-022-03: Security Fences and Gates
Published October 1, 2013 · DSE reviewed August 11, 2026
www.weather.gov
2 resourcesChecklistAdvisory
Add NOAA Weather Radio as a tested independent alert path
NOAA Weather Radio All Hazards
Publication date not specified · DSE reviewed August 25, 2026
PlaybookImportant
Turn weather Watches and Warnings into preapproved operating triggers
National Weather Service Baltimore/Washington Forecast Office FAQ
Publication date not specified · DSE reviewed August 25, 2026