Trace Errors when you run DCDIAG commands across Active Directory and Windows DNS
Microsoft states: “This article helps fix errors that occur when you run DCDIAG.EXE /E or /A or /C commands.”
Read the guideDSE security knowledge hubCybersecurity
Cybersecurity
Knowledge
Page 98 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Cybersecurity knowledge center
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
DSE post stream
1,745 articlesCybersecurity
Review Use Ntdsutil to manage AD files before AD/DNS changes
Microsoft states: “This article describes how to manage the Active Directory (AD) database file, Ntds.dit, from the command line.”
Read the playbook
Scope Troubleshoot AD FS 2.0 error (Access is denied) in observed AD/DNS state
Microsoft states: “This article provides a solution to fix the Active Directory Federated Services (AD FS) 2.0 error.”
Read the briefing
Validate An Attempt to Resolve the DNS Name of a DC in the Domain Being Joined Has Failed with AD/DNS evidence
Microsoft states: “This article provides troubleshooting steps for resolving the Domain Name System (DNS) error code 0xa8b when you join a workgroup computer to a domain.”
Read the checklist
Stage Group policy application rules for domain controllers with AD/DNS rollback checks
Microsoft states: “This article describes group policy application rules for domain controllers.”
Read the explainer
Trace KFSO doesn't work in external trust across Active Directory and Windows DNS
Microsoft states: “This article discusses a situation where Kerberos Forest Search Order (KFSO) doesn’t work in an external trust.”
Read the guide
Review LDAPS connection fails with event ID 36884 before AD/DNS changes
Microsoft states: “This article introduces how to troubleshoot the event ID 36884 issue that occurs when you try to build a Lightweight Directory Access Protocol (LDAP) connection.”
Read the playbook
Scope AuditPol and Local Security Policy results may differ in observed AD/DNS state
Microsoft states: “This article helps fix an issue where audit policy settings with AuditPol and the Local Security Policy (SECPOL.msc) show different results.”
Read the briefing
Validate Configure an authoritative time with AD/DNS evidence
Microsoft states: “This article describes how to configure the Windows Time service and troubleshoot when the Windows Time service doesn’t work correctly.”
Read the checklist
Stage A newly promoted domain controller may fail to advertise after completion of DCpromo with AD/DNS rollback checks
Microsoft states: “This article describes an issue where a newly promoted domain controller fails to advertise after completion of DCpromo.”
Read the explainer