Remove-DnsServerTrustAnchor: remove dns server trust anchor with rollback checks
Microsoft states: “The Remove-DnsServerTrustAnchor cmdlet removes a trust anchor from a Domain Name System (DNS) server.”
Read the checklistDSE security knowledge hubMicrosoft 365 & Identity
Microsoft 365 & Identity
Knowledge
Page 28 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Microsoft 365 & Identity knowledge center
Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
DSE post stream
760 articlesMicrosoft 365 & Identity
Remove-DnsServerSigningKey: remove dns server signing key against recorded identity and DNS state
Microsoft states: “The Remove-DnsServerSigningKey cmdlet removes one or more signing keys from the specified Domain Name System (DNS) zone.”
Read the explainer
Remove-DnsServerClientSubnet: remove dns server client subnet with before-and-after evidence
Microsoft states: “The Remove-DnsServerClientSubnet cmdlet removes a client subnet from a Domain Name System (DNS) server.”
Read the guide
Start-DnsServerScavenging: start dns server scavenging with bounded evidence
Microsoft states: “Notifies a DNS server to attempt a search for stale resource records.”
Read the playbook
Disable-DnsServerPolicy: disable dns server policy under AD/DNS change control
Microsoft states: “The Disable-DnsServerPolicy cmdlet disables Domain Name System (DNS) server policies.”
Read the briefing
Enable-DnsServerPolicy: enable dns server policy with rollback checks
Microsoft states: “The Enable-DnsServerPolicy cmdlet enables Domain Name System (DNS) server policies.”
Read the checklist
Register-DnsServerDirectoryPartition: register dns server directory partition against recorded identity and DNS state
Microsoft states: “Registers a DNS server in a DNS application directory partition.”
Read the explainer
ConvertTo-DnsServerSecondaryZone: convertto dns server secondary zone with before-and-after evidence
Microsoft states: “Converts a primary zone or stub zone to a secondary zone.” It also states: “The ConvertTo-DnsServerSecondaryZone cmdlet converts primary zone or a stub zone on a Domain Name System (DNS) server to a secondary zone.”
Read the guide
Clear-DnsServerStatistics: clear dns server statistics with bounded evidence
Microsoft states: “The Clear-DnsServerStatistics cmdlet clears all Domain Name System (DNS) server statistics.”
Read the playbook
Restore-DnsServerPrimaryZone: restore dns server primary zone under AD/DNS change control
Microsoft states: “Restores primary DNS zone contents from Active Directory or from a file.”
Read the briefing