Page 121 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
Microsoft states: “Active Directory Certificate Services (AD CS) is a Windows Server role for issuing and managing public key infrastructure (PKI) certificates used in secure communication and authentication protocols.”
Read the checklist
Microsoft states: “Network Device Enrollment Service(NDES) for Active Directory Certificate Services support a policy module that provides extra security for the Simple Certificate Enrollment Protocol (SCEP).”
Read the explainer
Microsoft states: “This article shows you how to submit a certificate in Certification Authority (CA) Web Enrollment role service by using a PKCS #10 file or a PKCS #7 file.”
Read the guide
Microsoft states: “This article describes how to configure an Online Responder (OCSP) to sign responses by using Module-Lattice-Based Digital Signature Algorithm (ML-DSA) in Active Directory Certificate Services (AD CS).”
Read the playbook
Microsoft states: “This article provides a solution to an error message when non-administrator users who have been delegated control try to join computers to a domain.”
Read the briefing
Microsoft states: “This article provides a solution to fix an error (Access is denied) that occurs when you promote Windows Server 2012 R2 or later domain controllers in an existing domain.”
Read the checklist
Microsoft states: “This article provides a solution to an issue where Active Directory installation fails with an error: Creating the NTDS Settings object for this Active Directory Domain Controller on the remote AD DC.”
Read the explainer
Microsoft states: “This article provides a solution to an issue where an orphaned child domain controller can’t be replicated to other domain controllers.”
Read the guide
Microsoft states: “This article helps fix an error that occurs when you run the Get-ADGroupMember cmdlet in a scenario where a group has a member from a remote forest.”
Read the playbook
Microsoft states: “This article helps to fix the error c00002e2 or "Choose an option" when Domain controller does not start.”
Read the briefing