Treat derived-credential issuer recreation as a credential migration
Can deleting and re-adding the same Intune derived-credential issuer preserve existing device credentials?
Read the guideDSE security knowledge hubIT
IT
Knowledge
Page 59 of the DSE IT knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide IT knowledge center
Production-minded guidance for endpoints, servers, updates, cloud services, administration, and supportable operations.
DSE post stream
1,366 articlesIT
Plan update-ring uninstall as immediate recovery work, not scheduled maintenance
Will an Intune update-ring uninstall wait for the ring's maintenance schedule?
Read the guide
Repair a persistently failing log-alert query before restoring its rule
Can Azure Monitor automatically disable a log-search alert whose query keeps failing?
Read the guide
Check every Fluent Bit collector before enabling pod log-exclusion annotations
Can a pod annotation intended for Container Insights also stop another log collector?
Read the briefing
Replace ineffective diagnostic retention settings without overwriting other lifecycle rules
Where should diagnostic-log retention be enforced after the old storage-retention feature stopped applying?
Read the guide
Check installation and policy paths before declaring Dependency Agent removed
What can remain after removing the visible Dependency Agent extension?
Read the checklist
Separate permitted Bicep array values from the number of required selections
Review membership and item-count requirements separately before accepting a deployment input.
Read the guide
Keep runtime resource lookups out of ARM parameter defaults
Place a proposed default in the correct evaluation phase before changing deployment order.
Read the guide
Distinguish an SSH default reset from restoration of the previous configuration
Will Azure VMAccess reset-ssh restore the SSH configuration that existed before recovery?
Read the guide
Match exploit-protection scope to executable names and paths, not assumed versions
Can an exploit-protection application target distinguish versions or architectures sharing one executable name?
Read the briefing