Stage How to raise Active Directory domain and forest functional levels with AD/DNS rollback checks
Microsoft states: “This article describes how to raise Active Directory domain and forest functional levels.”
Read the explainerDSE security knowledge hubMicrosoft 365 & Identity
Microsoft 365 & Identity
Knowledge
Page 35 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Microsoft 365 & Identity knowledge center
Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
DSE post stream
764 articlesMicrosoft 365 & Identity
Trace Name computers, domains, sites, and OUs across Active Directory and Windows DNS
Microsoft states: “This article describes the naming conventions for computer accounts in Windows, NetBIOS domain names, DNS domain names, Active Directory sites, and organizational units (OUs) that are defined in Active Directory Domain Services (AD DS).”
Read the guide
Review Troubleshoot Event ID 1311 messages before AD/DNS changes
Microsoft states: “This article describes how to troubleshoot event ID 1311 messages in the Directory Service event log on a Windows domain.”
Read the playbook
Scope (Schema mismatch) error message occurs when you try to run the Active Directory Installation Wizard (Dcpromo.exe)
Microsoft states: “This article provides the resolution of fixing the error "schema mismatch", when you try to run the Active Directory Installation Wizard (Dcpromo.exe).”
Read the briefing
Validate Disable and replace TLS 1.0 in ADFS with AD/DNS evidence
Microsoft states: “This article provides guidance and considerations for disabling and replacing TLS 1.0 in Active Directory Federation Services (AD FS).”
Read the checklist
Stage Lingering objects in an AD DS forest with AD/DNS rollback checks
Microsoft states: “This article provides information about lingering objects in an Active Directory Domain Services (AD DS) forest.”
Read the explainer
Trace Use Directory Service to manage AD objects across Active Directory and Windows DNS
Microsoft states: “This article describes how to use the Directory Service command-line tools to perform administrative tasks for Active Directory in Windows Server 2003.”
Read the guide
Review Domain controllers don't demote before AD/DNS changes
Microsoft states: “This article provides a workaround for an issue where domain controllers don’t demote when you use the Active Directory Installation Wizard (Dcpromo.exe) to force demotion.”
Read the playbook
Scope Jet database errors and recovery steps in observed AD/DNS state
Microsoft states: “This article introduces Jet database error messages and troubleshooting steps.”
Read the briefing
Validate Active Directory replication event ID 2108 and 1084 with AD/DNS evidence
Microsoft states: “This article provides a solution to an issue where you get event IDs 2108 and 1084 when inbound replication of the Active Directory Domain Services (AD DS) occurs.”
Read the checklist