Page 100 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
Microsoft states: “This article describes how to install and configure a new Active Directory installation in a laboratory environment that includes Windows Server 2003 and Active Directory.”
Read the guide
Microsoft states: “This step-by-step article describes how to configure Active Directory diagnostic event logging in Microsoft Windows Server operating systems.”
Read the playbook
Microsoft states: “You have a user, Managed Service Account (MSA), Group Managed Service Account (gMSA), computer, or group object that is in use.”
Read the briefing
Microsoft states: “This article describes how to restrict Active Directory (AD) replication remote procedure calls (RPC) traffic to a specific port in Windows Server.”
Read the checklist
Microsoft states: “This article provides a solution to an issue that occurs when you reboot an AD LDS server that holds FSMO roles or restart an AD LDS instance on that server.”
Read the explainer
Microsoft states: “This article describes information about using the UserAccountControl attribute to manipulate user account properties.”
Read the guide
Microsoft states: “This article helps to fix the error "access is denied" on a domain controller when you try to replicate the Active Directory directory service.”
Read the playbook
Microsoft states: “This article describes the support boundaries for the Windows Time service (W32Time) in environments that require highly accurate and stable system time.”
Read the briefing
Microsoft states: “This article provides workarounds for an issue in which the computer clock resets incorrectly if you restart the computer while it doesn’t have an internet connection.”
Read the checklist
Microsoft states: “This article explains how Group Managed Service Accounts (gMSA) can experience authentication failures when Active Directory domain controllers improperly sort multiple Key Distribution Service (KDS) root keys.”
Read the explainer