Stage Selecting the Forest Root Domain with AD/DNS rollback checks
Use Selecting the Forest Root Domain to review this narrow operational decision without extending the source beyond its stated scope.
Read the explainerDSE security knowledge hubMicrosoft 365 & Identity
Microsoft 365 & Identity
Knowledge
Page 5 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Explore this topic
Start with the cornerstone guide Microsoft 365 & Identity knowledge center
Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
DSE post stream
744 articlesMicrosoft 365 & Identity
Trace Upgrade domain controllers to a newer version of Windows Server across Active Directory and Windows DNS
Use Upgrade domain controllers to a newer version of Windows Server to review this narrow operational decision without extending the source beyond its stated scope.
Read the guide
Review Active Directory Privileged Accounts and Groups Guide before AD/DNS changes
Use Active Directory Privileged Accounts and Groups Guide to review this narrow operational decision without extending the source beyond its stated scope.
Read the playbook
Scope Appendix E - Securing Enterprise Admins Groups in Active Directory in observed AD/DNS state
Use Appendix E - Securing Enterprise Admins Groups in Active Directory to review this narrow operational decision without extending the source beyond its stated scope.
Read the briefing
Validate Planning Regional Domain Controller Placement with AD/DNS evidence
Use Planning Regional Domain Controller Placement to review this narrow operational decision without extending the source beyond its stated scope.
Read the checklist
Stage Virtualized Domain Controller Cloning Test Guidance for Application Vendors with AD/DNS rollback checks
Use Virtualized Domain Controller Cloning Test Guidance for Application Vendors to review this narrow operational decision without extending the source beyond its stated scope.
Read the explainer
Trace Integrating AD DS into an Existing DNS Infrastructure across Active Directory and Windows DNS
Use Integrating AD DS into an Existing DNS Infrastructure to review this narrow operational decision without extending the source beyond its stated scope.
Read the guide
Review Service Accounts in Windows Server before AD/DNS changes
Use Service Accounts in Windows Server to review this narrow operational decision without extending the source beyond its stated scope.
Read the playbook
Scope Transfer Flexible Single Master Operations roles in Windows Server in observed AD/DNS state
Use Transfer Flexible Single Master Operations roles in Windows Server to review this narrow operational decision without extending the source beyond its stated scope.
Read the briefing
Validate Raise Domain and Forest Functional Levels in AD DS on Windows Server with AD/DNS evidence
Use Raise Domain and Forest Functional Levels in AD DS on Windows Server to review this narrow operational decision without extending the source beyond its stated scope.
Read the checklist