Trace Database garbage collection process across Active Directory and Windows DNS
Microsoft states: “This article describes the Active Directory database garbage collection process and calculation of allowed intervals.”
Read the guideDSE security knowledge hubCybersecurity
Cybersecurity
Knowledge
Page 101 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Cybersecurity knowledge center
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
DSE post stream
1,745 articlesCybersecurity
Review Can't sign in to the domain before AD/DNS changes
Microsoft states: “This article provides a solution to an issue where users can’t sign in to the domain after password changes on a Remote Domain Controller.”
Read the playbook
Scope Accounts Have the LastLogonTimestamp Value Set to Future in observed AD/DNS state
Microsoft states: “This article helps resolve an issue in which user or computer accounts have the lastLogonTimestamp value set to a future time.”
Read the briefing
Validate Restrict use of a computer to one domain user only with AD/DNS evidence
Microsoft states: “This article describes how to restrict use of a computer to one domain user only.”
Read the checklist
Stage DC promotion stops responding with AD/DNS rollback checks
Microsoft states: “This article provides a solution to an issue where domain controller promotion stops responding when short credentials are used in an environment that has NetBIOS over TCPIP disabled.”
Read the explainer
Trace Restore IIS and clean up Active Directory when you uninstall AD FS 2.0 across Active Directory and Windows DNS
Microsoft states: “This article describes how to restore Internet Information Services (IIS) and clean up Active Directory when you uninstall Active Directory Federation Services 2.0.”
Read the guide
Review Synchronizing Between AD DS and AD LDS Enters Endless Loop if the base DN is a Grandchild OU before AD/DNS changes
Microsoft states: “This issue occurs when you specify a grandchild organizational unit (OU) as the base distinguished name (base DN) in the Adamsync configuration file.”
Read the playbook
Scope Error 0x40 The Specified Network Name Is No Longer Available in observed AD/DNS state
Microsoft states: “This article addresses the error code 0x40 encountered during domain join operations.”
Read the briefing
Validate ISMServ.exe fails to start when a domain controller starts with AD/DNS evidence
Microsoft states: “This article provides a workaround for an issue where the IsmServ service doesn’t start correctly when a domain controller starts.”
Read the checklist
Stage Change AD FS 2.0 service communications with AD/DNS rollback checks
Microsoft states: “This article provides the steps to change the Active Directory Federation Services 2.0 service communications certificate.”
Read the explainer