Trace Event 142 time service stopped advertising across Active Directory and Windows DNS
Microsoft states: “This article provides a resolution for event 142: The time service has stopped advertising as a time source.”
Read the guideDSE security knowledge hubCybersecurity
Cybersecurity
Knowledge
Page 95 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Cybersecurity knowledge center
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
DSE post stream
1,745 articlesCybersecurity
Review Description of the Lingering Object Liquidator tool before AD/DNS changes
Microsoft states: “This article describes the Lingering Object Liquidator (LoL) tool for finding and removing lingering objects.”
Read the playbook
Scope Phantoms, tombstones, and the infrastructure master in observed AD/DNS state
Microsoft states: “This article describes how phantoms are used in Windows Server.”
Read the briefing
Validate Troubleshoot Authentication Errors When Joining Windows-based Computers to a Domain with AD/DNS evidence
Microsoft states: “This article describes several authentication related error messages that can occur when you join client computers that are running Windows to a domain.”
Read the checklist
Stage Manually Remove Lingering Objects on Outdated Replication Partners with AD/DNS rollback checks
Microsoft states: “This article helps manually remove lingering objects after you bring an outdated domain controller (DC) or global catalog server back online.”
Read the explainer
Trace Event IDs 5788 and 5789 occur across Active Directory and Windows DNS
Microsoft states: “This article provides solutions to an issue where event ID 5788 and event ID 5789 are logged when the DNS domain name and the Active Directory domain name differ on a Windows-based computer.”
Read the guide
Review Password change processing and conflict resolution functionality in Windows before AD/DNS changes
Microsoft states: “This article describes a registry value that administrators can use to control when the primary domain controller (PDC) is contacted, which can help reduce communication costs between sites and reduce the load on the PDC.”
Read the playbook
Scope NTDS replication warning IDs 1083 and 1061 in observed AD/DNS state
Microsoft states: “This article provides help to fix an issue that occurs if a change that is made on the local domain controller is also made on the domain controller that holds the PDC operations master role.”
Read the briefing
Validate Troubleshoot LDAP over SSL connection problems with AD/DNS evidence
Microsoft states: “This article discusses steps about how to troubleshoot LDAP over SSL (LDAPS) connection problems.”
Read the checklist
Stage Unable to select DNS Server role when adding a domain controller into an existing Active Directory domain
Microsoft states: “When promoting a Windows Server 2008 or Windows Server 2008 R2 replica domain controller, the option to auto-install the DNS Server role is disabled or grayed out in the Active Directory Installation Wizard (DCPROMO).”
Read the explainer