Export-DnsServerZone: export dns server zone with rollback checks
Microsoft states: “The Export-DnsServerZone cmdlet creates a file containing resource records for an Active Directory-integrated zone for troubleshooting purposes.”
Read the checklistDSE security knowledge hubMicrosoft 365 & Identity
Microsoft 365 & Identity
Knowledge
Page 29 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Microsoft 365 & Identity knowledge center
Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
DSE post stream
760 articlesMicrosoft 365 & Identity
Remove-DnsServerForwarder: remove dns server forwarder against recorded identity and DNS state
Microsoft states: “The Remove-DnsServerForwarder cmdlet removes one or more forwarders from the forwarders list of a Domain Name System (DNS) server.”
Read the explainer
Get-DnsServerZone: inventory dns server zone with before-and-after evidence
Microsoft states: “The Get-DnsServerZone cmdlet gets the zones that exist on a Domain Name System (DNS) server.”
Read the guide
Suspend-DnsServerZone: suspend dns server zone with bounded evidence
Microsoft states: “The Suspend-DnsServerZone cmdlet suspends a Domain Name System (DNS) zone.”
Read the playbook
Remove-DnsServerResponseRateLimitingExceptionlist: remove dns server response rate limiting exceptionlist under AD/DNS change control
Microsoft states: “The Remove-DnsServerResponseRateLimitingExceptionlist cmdlet removes a Response Rate Limiting (RRL) exception list from a Domain Name System (DNS) server.”
Read the briefing
Set-DnsServerEDns: change dns server edns with rollback checks
Microsoft states: “The Set-DnsServerEDns cmdlet changes extension mechanisms for DNS (EDNS) settings on a Domain Name System (DNS) server.”
Read the checklist
Sync-DnsServerZone: synchronize dns server zone against recorded identity and DNS state
Microsoft states: “Checks the DNS server memory for changes, and writes them to persistent storage.”
Read the explainer
Disable-DnsServerSigningKeyRollover: disable dns server signing key rollover with before-and-after evidence
Microsoft states: “The Disable-DnsServerSigningKeyRollover cmdlet disables key rollover on an input key.”
Read the guide
Import-DnsServerRootHint: import dns server root hint with bounded evidence
Microsoft states: “The Import-DnsServerRootHint cmdlet copies root hints from a Domain Name System (DNS) server.”
Read the playbook
Remove-DnsServerRecursionScope: remove dns server recursion scope under AD/DNS change control
Microsoft states: “The Remove-DnsServerRecursionScope cmdlet removes a recursion scope from a Domain Name System (DNS) server.”
Read the briefing