Set-ADUser: change aduser with rollback checks
Microsoft states: “The Set-ADUser cmdlet modifies the properties of an Active Directory user.”
Read the checklistDSE security knowledge hubMicrosoft 365 & Identity
Microsoft 365 & Identity
Knowledge
Page 15 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Microsoft 365 & Identity knowledge center
Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
DSE post stream
760 articlesMicrosoft 365 & Identity
New-ADUser: create aduser against recorded identity and DNS state
Microsoft states: “You can set commonly used user property values by using the cmdlet parameters.”
Read the explainer
Set-ADComputer: change adcomputer with before-and-after evidence
Microsoft states: “The Set-ADComputer cmdlet modifies the properties of an Active Directory computer object.”
Read the guide
New-ADComputer: create adcomputer with bounded evidence
Microsoft states: “The New-ADComputer cmdlet creates a new Active Directory computer object.”
Read the playbook
New-ADServiceAccount: create adservice account under AD/DNS change control
Microsoft states: “Creates a new Active Directory managed service account or group managed service account object.”
Read the briefing
Set-ADServiceAccount: change adservice account with rollback checks
Microsoft states: “Modifies an Active Directory managed service account or group managed service account object.”
Read the checklist
Set-ADObject: change adobject against recorded identity and DNS state
Microsoft states: “The Set-ADObject cmdlet modifies the properties of an Active Directory object.”
Read the explainer
Set-ADOrganizationalUnit: change adorganizational unit with before-and-after evidence
Microsoft states: “The Set-ADOrganizationalUnit cmdlet modifies the properties of an Active Directory organizational unit (OU).”
Read the guide
Get-ADObject: inventory adobject with bounded evidence
Microsoft states: “The Get-ADObject cmdlet gets an Active Directory object or performs a search to get multiple objects.”
Read the playbook
Set-ADGroup: change adgroup under AD/DNS change control
Microsoft states: “The Set-ADGroup cmdlet modifies the properties of an Active Directory group.”
Read the briefing