Get-DnsServerRecursionScope: inventory dns server recursion scope with rollback checks
Microsoft states: “The Get-DnsServerRecursionScope cmdlet gets the Domain Name System (DNS) server recursion scopes.”
Read the checklistDSE security knowledge hubMicrosoft 365 & Identity
Microsoft 365 & Identity
Knowledge
Page 31 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Microsoft 365 & Identity knowledge center
Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
DSE post stream
760 articlesMicrosoft 365 & Identity
Get-DnsServerVirtualizationInstance: inventory dns server virtualization instance against recorded identity and DNS state
Microsoft states: “The Get-DnsServerVirtualizationInstance cmdlet gets the virtualization instances on the Domain Name System (DNS) server.”
Read the explainer
Update-DnsServerTrustPoint: update dns server trust point with before-and-after evidence
Microsoft states: “Updates all trust points in a DNS trust anchor zone.” It also states: “The Update-DnsServerTrustPoint cmdlet updates all trust points that are listed in a Domain Name System (DNS) trust anchor zone.”
Read the guide
Get-DnsServerTrustAnchor: inventory dns server trust anchor with bounded evidence
Microsoft states: “The Get-DnsServerTrustAnchor cmdlet gets trust anchors on a Domain Name System (DNS) server.”
Read the playbook
Get-DnsServerGlobalQueryBlockList: inventory dns server global query block list under AD/DNS change control
Microsoft states: “The Get-DnsServerGlobalQueryBlockList cmdlet gets a global query block list on a Domain Name System (DNS) server.”
Read the briefing
Get-DnsServerTrustPoint: inventory dns server trust point with rollback checks
Microsoft states: “The Get-DnsServerTrustPoint cmdlet gets one or more trust points on a Domain Name System (DNS) server.”
Read the checklist
Get-DnsServerGlobalNameZone: inventory dns server global name zone against recorded identity and DNS state
Microsoft states: “The Get-DnsServerGlobalNameZone cmdlet gets a Domain Name System (DNS) server GlobalNames zone object for the local server or a specified DNS server.”
Read the explainer
Show-DnsServerKeyStorageProvider: show dns server key storage provider with before-and-after evidence
Microsoft states: “The Show-DnsServerKeyStorageProvider cmdlet returns a list key storage providers that are available on a Domain Name System (DNS) server.”
Read the guide
Get-DnsServerDiagnostics: inventory dns server diagnostics with bounded evidence
Microsoft states: “The Get-DnsServerDiagnostics cmdlet retrieves Domain Name System (DNS) server diagnostic and logging parameters.”
Read the playbook
Get-DnsServerScavenging: inventory dns server scavenging under AD/DNS change control
Microsoft states: “The Get-DnsServerScavenging cmdlet gets aging and scavenging settings on a Domain Name System (DNS) server.”
Read the briefing