New-ADClaimType: create adclaim type with rollback checks
Microsoft states: “The New-ADClaimType cmdlet creates a new claim type in Active Directory.”
Read the checklistDSE security knowledge hubMicrosoft 365 & Identity
Microsoft 365 & Identity
Knowledge
Page 19 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Microsoft 365 & Identity knowledge center
Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
DSE post stream
760 articlesMicrosoft 365 & Identity
Remove-ADClaimTransformPolicy: remove adclaim transform policy against recorded identity and DNS state
Microsoft states: “The Remove-ADClaimTransformPolicy cmdlet can be used to remove a claim transformation policy object from Active Directory.”
Read the explainer
Grant-ADAuthenticationPolicySiloAccess: grant adauthentication policy silo access with before-and-after evidence
Microsoft states: “The Grant-ADAuthenticationPolicySiloAccess cmdlet grants permission to an account to join an authentication policy silo in Active Directory® Domain Services.”
Read the guide
Remove-ADReplicationSubnet: remove adreplication subnet with bounded evidence
Microsoft states: “Deletes the specified Active Directory replication subnet object from the directory.”
Read the playbook
Remove-ADGroupMember: remove adgroup member under AD/DNS change control
Microsoft states: “Removes one or more members from an Active Directory group.”
Read the briefing
Add-ADGroupMember: stage additions to adgroup member with rollback checks
Microsoft states: “Adds one or more members to an Active Directory group.” It also states: “The Add-ADGroupMember cmdlet adds one or more users, groups, service accounts, or computers as new members of an Active Directory group.”
Read the checklist
Stage about_ActiveDirectory_ObjectModel with AD/DNS rollback checks
Microsoft states: “Describes the object model of the Active Directory module for Windows PowerShell.”
Read the explainer
Get-ADOptionalFeature: inventory adoptional feature with before-and-after evidence
Microsoft states: “The Get-ADOptionalFeature cmdlet gets an optional feature or performs a search to retrieve multiple optional features from an Active Directory.”
Read the guide
Add-ADPrincipalGroupMembership: stage additions to adprincipal group membership with bounded evidence
Microsoft states: “Adds a member to one or more Active Directory groups.” It also states: “The Add-ADPrincipalGroupMembership cmdlet adds a user, group, service account, or computer as a new member to one or more Active Directory groups.”
Read the playbook
New-ADResourceProperty: create adresource property under AD/DNS change control
Microsoft states: “The New-ADResourceProperty cmdlet creates a resource property in the directory.”
Read the briefing