Page 122 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
Microsoft states: “Active Directory Certificate Services (AD CS) supports Module-Lattice-Based Digital Signature Algorithm (ML-DSA), a National Institute of Standards and Technology (NIST)-standardized post-quantum digital signature algorithm designed to resist quantum computing attacks.”
Read the checklist
Microsoft states: “This article provides a resolution for the issue that Windows Time service does not correct the time if the service gets into Spike state.”
Read the explainer
Microsoft states: “This article describes how to perform offline defragmentation of the Active Directory database.”
Read the guide
Microsoft states: “This article helps fix an error that occurs when processing the password change for a user where the password is expired or set to change at next logon.”
Read the playbook
Microsoft states: “This article solves a problem that the Adprep /rodcprep command isn’t completed successfully because the infrastructure master for one or more active directory NDNCs isn’t reachable.”
Read the briefing
Microsoft states: “This article solves the high Lsass.exe CPU usage on Active Directory Domain Controllers.”
Read the checklist
Microsoft states: “This article describes how to turn on debug logging for the Windows Time service (also known as W32time).”
Read the explainer
Microsoft states: “This article provides a solution to an issue where clients cannot join or log on to the domain.”
Read the guide
Microsoft states: “This article explains how to change permissions so that nonadministrators can view the Active Directory deleted objects container.”
Read the playbook
Microsoft states: “This article describes the steps to complete a semantic database analysis for the Active Directory database by using Ntdsutil.exe.”
Read the briefing