DSE security knowledge hub

Microsoft 365 & Identity
Knowledge

Page 39 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.

DSE-authoredOfficial sourcesReviewed guidance
Search the library
Explore this topic

Microsoft 365 & Identity knowledge center

Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.

Start with the cornerstone guide
DSE post stream

Microsoft 365 & Identity

764 articles
DSE visual briefIdentity & cloud

Trace Event IDs 5788 and 5789 occur across Active Directory and Windows DNS

Microsoft states: “This article provides solutions to an issue where event ID 5788 and event ID 5789 are logged when the DNS domain name and the Active Directory domain name differ on a Windows-based computer.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the guide
DSE visual briefIdentity & cloud

Review Password change processing and conflict resolution functionality in Windows before AD/DNS changes

Microsoft states: “This article describes a registry value that administrators can use to control when the primary domain controller (PDC) is contacted, which can help reduce communication costs between sites and reduce the load on the PDC.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the playbook
DSE visual briefNetworks & infrastructure

Scope NTDS replication warning IDs 1083 and 1061 in observed AD/DNS state

Microsoft states: “This article provides help to fix an issue that occurs if a change that is made on the local domain controller is also made on the domain controller that holds the PDC operations master role.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the briefing
DSE visual briefIdentity & cloud

Stage Unable to select DNS Server role when adding a domain controller into an existing Active Directory domain

Microsoft states: “When promoting a Windows Server 2008 or Windows Server 2008 R2 replica domain controller, the option to auto-install the DNS Server role is disabled or grayed out in the Active Directory Installation Wizard (DCPROMO).”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the explainer