Trace This page can't be displayed across Active Directory and Windows DNS
Microsoft states: “This article provides a solution to an error when you try to access an application on a website that uses AD FS 2.0.”
Read the guideDSE security knowledge hubCybersecurity
Cybersecurity
Knowledge
Page 99 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Cybersecurity knowledge center
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
DSE post stream
1,745 articlesCybersecurity
Review Find servers that hold FSMO roles before AD/DNS changes
Microsoft states: “This article describes how to find the servers that hold the Flexible Single Master Operation (FSMO) roles in a forest.”
Read the playbook
Scope w32tm /resync command fails with "The computer didn't resync because no time data was available." in observed AD/DNS state
Microsoft states: “This article provides several possible solutions to an error that you may get when you run the w32tm /resync command to synchronize time with a time source.”
Read the briefing
Validate LDAP to Active Directory is disabled with AD/DNS evidence
Microsoft states: “This article provides some information about the issue that anonymous LDAP operations to Active Directory are disabled on domain controllers.”
Read the checklist
Stage How to Turn on Debug Logging of the LDAP Client (Wldap32.dll) with AD/DNS rollback checks
Microsoft states: “This article describes how to turn on debug logging of the LDAP client (Wldap32.dll).”
Read the explainer
Trace Active Directory replication Event ID 1925 attempt to establish a replication link failed due to DNS lookup problem
Microsoft states: “This article helps to resolve the issue where you get Event ID 1925 with the error message that DNS lookup failed, inbound replication of a directory partition has failed on the destination domain controller.”
Read the guide
Review Make DCs to reply to LDAP Ping on UDP 138 port before AD/DNS changes
Microsoft states: “This article describes how to make domain controllers to reply to LDAP Ping.”
Read the playbook
Scope How to disable TLS 1.3 for AD and LDAP in observed AD/DNS state
Microsoft states: “The Windows updates KB5014668 and KB5014665 add support for Transport Layer Security (TLS) 1.3 when using LDAP over SSL or issuing the StartTLS command.”
Read the briefing
Validate Support policy and known issues for ADMT with AD/DNS evidence
Microsoft states: “This article discusses information about the current level of support for Active Directory Migration Tool (ADMT) on current Windows Client and Windows Server operating systems.”
Read the checklist
Stage Host AD DCs in virtual hosting environments with AD/DNS rollback checks
Microsoft states: “This article describes the issues that affect a Windows Server-based domain controller (DC) running as a guest OS in virtual hosting environments.”
Read the explainer