Page 10 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.
Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
Microsoft states: “Some privileged identity management solutions require that the software’s service accounts are granted permanent membership in groups such as DA or Administrators in each domain in the forest.”
Read the checklist
Microsoft states: “A directory is a hierarchical structure that stores information about objects on the network.”
Read the explainer
Microsoft states: “By deploying Windows Server Active Directory Domain Services (AD DS) in your environment, you can take advantage of the centralized, delegated administrative model and single sign-on (SSO) capability that AD DS provides.”
Read the guide
Microsoft states: “The following table contains a list of links to external documents and their URLs so that readers of hard copies of this document can access this information.”
Read the playbook
Microsoft states: “You can use organizational units (OUs) to delegate the administration of objects, such as users or computers, within the OU to a designated individual or group.”
Read the briefing
Microsoft states: “Use the following procedure to reset the krbtgt password for the domain.”
Read the checklist
Microsoft states: “Use the following procedure to remove the global catalog from a DC.”
Read the explainer
Microsoft states: “The following table lists events that you should monitor in your environment, according to the recommendations provided in Monitoring Active Directory for Signs of Compromise.”
Read the guide
Microsoft states: “The following terms are relevant to the deployment process for Windows Server 2008 Active Directory Domain Services (AD DS).”
Read the playbook
Microsoft states: “Together with the Certificate Enrollment Policy Web Service, this enables policy-based automatic certificate enrollment for users and computers.”
Read the briefing