Set-ADAuthenticationPolicySilo: change adauthentication policy silo with rollback checks
Microsoft states: “Modifies an Active Directory Domain Services authentication policy silo object.”
Read the checklistDSE security knowledge hubMicrosoft 365 & Identity
Microsoft 365 & Identity
Knowledge
Page 14 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Microsoft 365 & Identity knowledge center
Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
DSE post stream
760 articlesMicrosoft 365 & Identity
Get-ADAccountResultantPasswordReplicationPolicy: inventory adaccount resultant password replication policy
Microsoft states: “Gets the resultant password replication policy for an Active Directory account.”
Read the explainer
Set-ADReplicationConnection: change adreplication connection with before-and-after evidence
Microsoft states: “The Set-ADReplicationConnection cmdlet sets properties on Active Directory replication connections.”
Read the guide
Add-ADFineGrainedPasswordPolicySubject: stage additions to adfine grained password policy subject with bounded evidence
Microsoft states: “Applies a fine-grained password policy to one more users and groups.”
Read the playbook
Set-ADReplicationSiteLinkBridge: change adreplication site link bridge under AD/DNS change control
Microsoft states: “Sets the properties of a replication site link bridge in Active Directory.”
Read the briefing
Remove-ADDomainControllerPasswordReplicationPolicy: remove addomain controller password replication policy with rollback checks
Microsoft states: “Removes users, computers, and groups from the allowed or denied list of a read-only domain controller password replication policy.”
Read the checklist
Remove-ADFineGrainedPasswordPolicySubject: remove adfine grained password policy subject against recorded identity and DNS state
Microsoft states: “Removes one or more users from a fine-grained password policy.”
Read the explainer
New-ADReplicationSiteLink: create adreplication site link with before-and-after evidence
Microsoft states: “Creates a new Active Directory site link for in managing replication.”
Read the guide
Get-ADUserResultantPasswordPolicy: inventory aduser resultant password policy with bounded evidence
Microsoft states: “The Get-ADUserResultantPasswordPolicy cmdlet gets the resultant password policy object (RSoP) for a user.”
Read the playbook
Set-ADCentralAccessPolicy: change adcentral access policy under AD/DNS change control
Microsoft states: “The Set-ADCentralAccessPolicy cmdlet can be used to modify a central access policy in Active Directory.”
Read the briefing