Validate Restrict use of a computer to one domain user only with AD/DNS evidence
Microsoft states: “This article describes how to restrict use of a computer to one domain user only.”
Read the checklistDSE security knowledge hubCybersecurity
Cybersecurity
Knowledge
Page 116 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Cybersecurity knowledge center
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
DSE post stream
1,892 articlesCybersecurity
Stage DC promotion stops responding with AD/DNS rollback checks
Microsoft states: “This article provides a solution to an issue where domain controller promotion stops responding when short credentials are used in an environment that has NetBIOS over TCPIP disabled.”
Read the explainer
Trace Restore IIS and clean up Active Directory when you uninstall AD FS 2.0 across Active Directory and Windows DNS
Microsoft states: “This article describes how to restore Internet Information Services (IIS) and clean up Active Directory when you uninstall Active Directory Federation Services 2.0.”
Read the guide
Review Synchronizing Between AD DS and AD LDS Enters Endless Loop if the base DN is a Grandchild OU before AD/DNS changes
Microsoft states: “This issue occurs when you specify a grandchild organizational unit (OU) as the base distinguished name (base DN) in the Adamsync configuration file.”
Read the playbook
Scope Error 0x40 The Specified Network Name Is No Longer Available in observed AD/DNS state
Microsoft states: “This article addresses the error code 0x40 encountered during domain join operations.”
Read the briefing
Validate ISMServ.exe fails to start when a domain controller starts with AD/DNS evidence
Microsoft states: “This article provides a workaround for an issue where the IsmServ service doesn’t start correctly when a domain controller starts.”
Read the checklist
Stage Change AD FS 2.0 service communications with AD/DNS rollback checks
Microsoft states: “This article provides the steps to change the Active Directory Federation Services 2.0 service communications certificate.”
Read the explainer
Trace Enable or disable DNS updates across Active Directory and Windows DNS
Microsoft states: “The article discusses how to disable DNS updates in Windows.”
Read the guide
Review DNS records not shown in DNS zones before AD/DNS changes
Microsoft states: “This article lists the causes of the issue where DNS records don’t show in a DNS zone.”
Read the playbook
Scope Don't be afraid of DNS scavenging, just be patient in observed AD/DNS state
Microsoft states: “This article discusses how to set up Domain Name System (DNS) scavenging and gives an example of setting scavenging up on a pre-existing zone.”
Read the briefing