Stage AD Forest Recovery - Remove the global catalog with AD/DNS rollback checks
Use AD Forest Recovery - Remove the global catalog to review this narrow operational decision without extending the source beyond its stated scope.
Read the explainerDSE security knowledge hubMicrosoft 365 & Identity
Microsoft 365 & Identity
Knowledge
Page 9 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Explore this topic
Start with the cornerstone guide Microsoft 365 & Identity knowledge center
Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
DSE post stream
744 articlesMicrosoft 365 & Identity
Trace Appendix L - Events to Monitor across Active Directory and Windows DNS
Use Appendix L - Events to Monitor to review this narrow operational decision without extending the source beyond its stated scope.
Read the guide
Review Appendix A - Reviewing Key AD DS Terms before AD/DNS changes
Use Appendix A - Reviewing Key AD DS Terms to review this narrow operational decision without extending the source beyond its stated scope.
Read the playbook
Scope Configure the Certificate Enrollment Web Service role service in observed AD/DNS state
Use Configure the Certificate Enrollment Web Service role service to review this narrow operational decision without extending the source beyond its stated scope.
Read the briefing
Validate Configure Certificate Enrollment Web Service for certificate key-based renewal on a custom port with AD/DNS evidence
Use Configure Certificate Enrollment Web Service for certificate key-based renewal on a custom port to review this narrow operational decision without extending the source beyond its stated scope.
Read the checklist
Stage Configure certificate templates for ML-DSA in Windows Server with AD/DNS rollback checks
Use Configure certificate templates for ML-DSA in Windows Server to review this narrow operational decision without extending the source beyond its stated scope.
Read the explainer
Trace Use a policy module with Network Device Enrollment Service across Active Directory and Windows DNS
Use Use a policy module with Network Device Enrollment Service to review this narrow operational decision without extending the source beyond its stated scope.
Read the guide
Review Configure the Certificate Enrollment Policy Web Service in Windows Server before AD/DNS changes
Use Configure the Certificate Enrollment Policy Web Service in Windows Server to review this narrow operational decision without extending the source beyond its stated scope.
Read the playbook
Scope Manage certificate templates in Windows Server in observed AD/DNS state
Use Manage certificate templates in Windows Server to review this narrow operational decision without extending the source beyond its stated scope.
Read the briefing
Validate Certificate template concepts in Windows Server with AD/DNS evidence
Use Certificate template concepts in Windows Server to review this narrow operational decision without extending the source beyond its stated scope.
Read the checklist