New-ADGroup: create adgroup with rollback checks
Microsoft states: “Properties that cannot be set by cmdlet parameters can be set using the OtherAttributes parameter.”
Read the checklistDSE security knowledge hubMicrosoft 365 & Identity
Microsoft 365 & Identity
Knowledge
Page 18 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Microsoft 365 & Identity knowledge center
Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
DSE post stream
760 articlesMicrosoft 365 & Identity
New-ADOrganizationalUnit: create adorganizational unit against recorded identity and DNS state
Microsoft states: “The New-ADOrganizationalUnit cmdlet creates an Active Directory organizational unit (OU).”
Read the explainer
Set-ADDomain: change addomain with before-and-after evidence
Microsoft states: “The Set-ADDomain cmdlet modifies the properties of an Active Directory domain.”
Read the guide
Get-ADOrganizationalUnit: inventory adorganizational unit with bounded evidence
Microsoft states: “The Get-ADOrganizationalUnit cmdlet gets an organizational unit (OU) object or performs a search to get multiple OUs.”
Read the playbook
Get-ADDefaultDomainPasswordPolicy: inventory addefault domain password policy under AD/DNS change control
Microsoft states: “Gets the default password policy for an Active Directory domain.”
Read the briefing
Get-ADReplicationSiteLinkBridge: inventory adreplication site link bridge with rollback checks
Microsoft states: “Gets a specific Active Directory site link bridge or a set of site link bridge objects based on a specified filter.”
Read the checklist
Get-ADReplicationConnection: inventory adreplication connection against recorded identity and DNS state
Microsoft states: “Returns a specific Active Directory replication connection or a set of AD replication connection objects based on a specified filter.”
Read the explainer
Add-ADCentralAccessPolicyMember: stage additions to adcentral access policy member with before-and-after evidence
Microsoft states: “Adds central access rules to a central access policy in Active Directory.”
Read the guide
Set-ADClaimType: change adclaim type with bounded evidence
Microsoft states: “The Set-ADClaimType cmdlet can be used to modify a claim type in Active Directory.”
Read the playbook
New-ADObject: create adobject under AD/DNS change control
Microsoft states: “The New-ADObject cmdlet creates an Active Directory object such as a new organizational unit (OU) or new user account.”
Read the briefing