DSE security knowledge hub

Cybersecurity
Knowledge

Page 106 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.

DSE-authoredOfficial sourcesReviewed guidance
Search the library
Explore this topic

Cybersecurity knowledge center

Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.

Start with the cornerstone guide
DSE post stream

Cybersecurity

1,745 articles
DSE visual briefIdentity & cloud

Validate What is Active Directory Certificate Services in Windows Server? with AD/DNS evidence

Microsoft states: “Active Directory Certificate Services (AD CS) is a Windows Server role for issuing and managing public key infrastructure (PKI) certificates used in secure communication and authentication protocols.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the checklist
DSE visual briefNetworks & infrastructure

Stage Install a policy module with the Network Device Enrollment Service in Windows Server with AD/DNS rollback checks

Microsoft states: “Network Device Enrollment Service(NDES) for Active Directory Certificate Services support a policy module that provides extra security for the Simple Certificate Enrollment Protocol (SCEP).”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the explainer
DSE visual briefIdentity & cloud

Trace Submit certificate requests to AD CS using a PKCS #10 or PKCS #7 file in Windows Server across Active Directory and Windows DNS

Microsoft states: “This article shows you how to submit a certificate in Certification Authority (CA) Web Enrollment role service by using a PKCS #10 file or a PKCS #7 file.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the guide
DSE visual briefNetworks & infrastructure

Review Configure Online Responders (OCSP) to use ML-DSA in Windows Server before AD/DNS changes

Microsoft states: “This article describes how to configure an Online Responder (OCSP) to sign responses by using Module-Lattice-Based Digital Signature Algorithm (ML-DSA) in Active Directory Certificate Services (AD CS).”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the playbook
DSE visual briefNetworks & infrastructure

Validate Access is denied when you promote domain controller with AD/DNS evidence

Microsoft states: “This article provides a solution to fix an error (Access is denied) that occurs when you promote Windows Server 2012 R2 or later domain controllers in an existing domain.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the checklist
DSE visual briefIdentity & cloud

Stage Active Directory installation fails with AD/DNS rollback checks

Microsoft states: “This article provides a solution to an issue where Active Directory installation fails with an error: Creating the NTDS Settings object for this Active Directory Domain Controller on the remote AD DC.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the explainer