Page 119 of the DSE IT knowledge center, with source-backed guidance and practical next steps.
Production-minded guidance for endpoints, servers, updates, cloud services, administration, and supportable operations.
Group Policy preferences configure settings beyond standard policy options but can be overridden by policy settings. Preferences are generally changeable by users, while policy settings are administrator-enforced.
Read the checklist
Group Policy is inherited and cumulative by default across an AD container and its children. Enforcement, blocked inheritance, filtering, loopback mode, and refresh behavior can alter the effective result.
Read the explainer
Group Policy Modeling simulates GPO deployment to a destination computer. Group Policy Results is the primary GPMC view for the policies actually applied.
Read the guide
GPMC provides unified Group Policy management across multiple forests. It manages GPOs, WMI filters, and Group Policy permissions and exposes scriptable interfaces.
Read the playbook
GPO backup and restore protects deployments from errors and disasters and avoids manual reconstruction. GPMC can copy GPOs across domains or import backed-up settings even where no trust relationship exists.
Read the briefing
A security principal is an entity the operating system can authenticate, including users, computers, and groups. Each security principal is represented by a unique SID used within Windows access control.
Read the checklist
A SID uniquely identifies a security principal or security group. The Windows SID model includes domain-relative RID allocation and well-known SID values.
Read the explainer
Special identity groups provide a Windows mechanism for assigning access based on authentication or operating context. The reference distinguishes identities such as Anonymous Logon, Authenticated Users, and authentication-authority asserted identities.
Read the guide
A dMSA can migrate a traditional service account to managed randomized keys while disabling the original password. dMSA authentication is bound to machine identities explicitly mapped in Active Directory.
Read the playbook
AD automatically manages dMSA credentials instead of requiring manual password administration. The setup workflow covers creation, migration completion, and review of dMSA event logs.
Read the briefing