Add-DnsServerVirtualizationInstance: stage additions to dns server virtualization instance with rollback checks
Microsoft states: “The Add-DnsServerVirtualizationInstance cmdlet adds a virtualization instance to a DNS Server.”
Read the checklistDSE security knowledge hubMicrosoft 365 & Identity
Microsoft 365 & Identity
Knowledge
Page 30 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Microsoft 365 & Identity knowledge center
Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
DSE post stream
760 articlesMicrosoft 365 & Identity
Get-DnsServerResponseRateLimiting: inventory dns server response rate limiting against recorded identity and DNS state
Microsoft states: “The Get-DnsServerResponseRateLimiting cmdlet displays response rate limiting (RRL) settings on a DNS server.”
Read the explainer
Set-DnsServerRecursionScope: change dns server recursion scope with before-and-after evidence
Microsoft states: “The Set-DnsServerRecursionScope cmdlet modifies a recursion scope on a Domain Name System (DNS) server.”
Read the guide
Get-DnsServer: inventory dns server with bounded evidence
Microsoft states: “The Get-DnsServer cmdlet retrieves a Domain Name System (DNS) server configuration.”
Read the playbook
Remove-DnsServerVirtualizationInstance: remove dns server virtualization instance under AD/DNS change control
Microsoft states: “This command removes virtualization instance named 8231 from the DNS server.”
Read the briefing
Invoke-DnsServerZoneUnsign: invoke dns server zone unsign with rollback checks
Microsoft states: “The Invoke-DnsServerZoneUnsign cmdlet unsigns a DNS Security Extensions (DNSSEC)-signed Domain Name System (DNS) zone.”
Read the checklist
Clear-DnsServerCache: clear dns server cache against recorded identity and DNS state
Microsoft states: “Clears resource records from a cache on the DNS server.” It also states: “The Clear-DnsServerCache cmdlet clears resource records from a Domain Name System (DNS) server cache.”
Read the explainer
Set-DnsServerVirtualizationInstance: change dns server virtualization instance with before-and-after evidence
Microsoft states: “The Set-DnsServerVirtualizationInstance cmdlet updates the virtualization instance on the DNS server.”
Read the guide
Show-DnsServerCache: show dns server cache with bounded evidence
Microsoft states: “The Show-DNSServerCache cmdlet shows all cached Domain Name System (DNS) server resource records in the following format: Name, ResourceRecordData, Time-to-Live (TTL).”
Read the playbook
Get-DnsServerClientSubnet: inventory dns server client subnet under AD/DNS change control
Microsoft states: “The Get-DnsServerClientSubnet cmdlet gets client subnets for a Domain Name System (DNS) server.”
Read the briefing