Add-ADComputerServiceAccount: stage additions to adcomputer service account with rollback checks
Microsoft states: “Adds one or more service accounts to an Active Directory computer.”
Read the checklistDSE security knowledge hubMicrosoft 365 & Identity
Microsoft 365 & Identity
Knowledge
Page 21 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Microsoft 365 & Identity knowledge center
Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
DSE post stream
760 articlesMicrosoft 365 & Identity
Remove-ADComputer: remove adcomputer against recorded identity and DNS state
Microsoft states: “The Identity parameter specifies the Active Directory computer to remove.”
Read the explainer
Set-ADForest: change adforest with before-and-after evidence
Microsoft states: “The Set-ADForest cmdlet modifies the properties of an Active Directory forest.”
Read the guide
Get-ADAccountAuthorizationGroup: inventory adaccount authorization group with bounded evidence
Microsoft states: “The Get-ADAccountAuthorizationGroup cmdlet gets the security groups from the specified user, computer, or service accounts token.”
Read the playbook
Get-ADDomain: inventory addomain under AD/DNS change control
Microsoft states: “The Get-ADDomain cmdlet gets the Active Directory domain specified by the parameters.”
Read the briefing
Get-ADForest: inventory adforest with rollback checks
Microsoft states: “You can specify the forest by setting the Identity or Current parameters.”
Read the checklist
Install-ADServiceAccount: install adservice account against recorded identity and DNS state
Microsoft states: “Installs an Active Directory managed service account on a computer or caches a group managed service account on a computer.”
Read the explainer
New-ADDCCloneConfigFile: create addcclone config file with before-and-after evidence
Microsoft states: “Performs prerequisite checks for cloning a domain controller and generates a clone configuration file if all checks succeed.”
Read the guide
Get-ADComputerServiceAccount: inventory adcomputer service account with bounded evidence
Microsoft states: “The Get-ADComputerServiceAccount cmdlet gets all of the service accounts that are hosted by the specified computer.”
Read the playbook
Enable-ADOptionalFeature: enable adoptional feature under AD/DNS change control
Microsoft states: “The Enable-ADOptionalFeature cmdlet enables an Active Directory optional feature that is associated with a particular domain mode or forest mode.”
Read the briefing