Add-ADResourcePropertyListMember: stage additions to adresource property list member with rollback checks
Microsoft states: “Adds one or more resource properties to a resource property list in Active Directory.”
Read the checklistDSE security knowledge hubMicrosoft 365 & Identity
Microsoft 365 & Identity
Knowledge
Page 23 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Microsoft 365 & Identity knowledge center
Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
DSE post stream
760 articlesMicrosoft 365 & Identity
Get-ADDCCloningExcludedApplicationList: inventory addccloning excluded application list against recorded identity and DNS state
Microsoft states: “Gets a list of installed programs and services present on this domain controller that are not in the default or user defined inclusion list.”
Read the explainer
Add-DnsServerQueryResolutionPolicy: stage additions to dns server query resolution policy with before-and-after evidence
Microsoft states: “Adds a policy for query resolution to a DNS server.” It also states: “The Add-DnsServerQueryResolutionPolicy cmdlet adds a policy for query resolution to a Domain Name System (DNS) server.”
Read the guide
Add-DnsServerResourceRecord: stage additions to dns server resource record with bounded evidence
Microsoft states: “Adds a resource record of a specified type to a specified DNS zone.”
Read the playbook
Add-DnsServerZoneTransferPolicy: stage additions to dns server zone transfer policy under AD/DNS change control
Microsoft states: “The Add-DnsServerZoneTransferPolicy cmdlet adds a zone transfer policy to a Domain Name System (DNS) server.”
Read the briefing
Set-DnsServerQueryResolutionPolicy: change dns server query resolution policy with rollback checks
Microsoft states: “Updates settings of a query resolution policy on a DNS server.”
Read the checklist
Set-DnsServerDiagnostics: change dns server diagnostics against recorded identity and DNS state
Microsoft states: “The Set-DnsServerDiagnostics cmdlet sets debugging and logging parameters on a Domain Name System (DNS) server.”
Read the explainer
Trace DnsServer across Active Directory and Windows DNS
Microsoft states: “This reference provides cmdlet descriptions and syntax for all DNS Server cmdlets.”
Read the guide
Set-DnsServerDsSetting: change dns server ds setting with bounded evidence
Microsoft states: “The Set-DnsServerDsSetting cmdlet modifies Domain Name System (DNS) Active Directory settings.”
Read the playbook
Get-DnsServerStatistics: inventory dns server statistics under AD/DNS change control
Microsoft states: “The Get-DnsServerStatistics cmdlet retrieves statistics of a Domain Name System (DNS) server.”
Read the briefing