Set-ADDomainMode: change addomain mode with rollback checks
Microsoft states: “The Set-ADDomainMode cmdlet sets the domain mode for a domain.”
Read the checklistDSE security knowledge hubMicrosoft 365 & Identity
Microsoft 365 & Identity
Knowledge
Page 22 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Microsoft 365 & Identity knowledge center
Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
DSE post stream
760 articlesMicrosoft 365 & Identity
Get-ADResourcePropertyList: inventory adresource property list against recorded identity and DNS state
Microsoft states: “The Get-ADResourcePropertyList cmdlet gets resource property lists from Active Directory.”
Read the explainer
Get-ADCentralAccessRule: inventory adcentral access rule with before-and-after evidence
Microsoft states: “The Get-ADCentralAccessRule cmdlet retrieves central access rules from Active Directory.”
Read the guide
Move-ADDirectoryServer: move addirectory server with bounded evidence
Microsoft states: “Moves a directory server in Active Directory to a new site.”
Read the playbook
Get-ADResourcePropertyValueType: inventory adresource property value type under AD/DNS change control
Microsoft states: “The Get-ADResourcePropertyValueType cmdlet retrieves a resource property value type from Active Directory.”
Read the briefing
New-ADCentralAccessRule: create adcentral access rule with rollback checks
Microsoft states: “The New-ADCentralAccessRule cmdlet creates a central access rule in Active Directory.”
Read the checklist
Undo-ADServiceAccountMigration: undo adservice account migration against recorded identity and DNS state
Microsoft states: “Reverts the previous migration phase of a migration to an delegated managed service account.”
Read the explainer
Reset-ADServiceAccountPassword: reset adservice account password with before-and-after evidence
Microsoft states: “The Reset-ADServiceAccountPassword cmdlet resets the password for the standalone managed service account (MSA) on the local computer.”
Read the guide
Clear-ADClaimTransformLink: clear adclaim transform link with bounded evidence
Microsoft states: “Removes a claims transformation from being applied to one or more cross-forest trust relationships in Active Directory.”
Read the playbook
Reset-ADServiceAccountMigration: reset adservice account migration under AD/DNS change control
Microsoft states: “Resets the state of a migration to an delegated managed service account and unlinks the delegated managed service account from the user account.”
Read the briefing