Page 103 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.
Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.
Microsoft states: “The Add-DnsServerDirectoryPartition cmdlet creates a Domain Name System (DNS) application directory partition.”
Read the guide
Microsoft states: “The Invoke-DnsServerZoneSign cmdlet signs a Domain Name System (DNS) server zone.”
Read the playbook
Microsoft states: “Rolls over a KSK that is waiting for a parent DS update.” It also states: “The Step-DnsServerSigningKeyRollover cmdlet rolls over a key signing key (KSK) that is waiting for an update from a parent delegation signer (DS).”
Read the briefing
Microsoft states: “Tests that a specified computer is a functioning DNS server.”
Read the checklist
Microsoft states: “Starts a zone transfer for a secondary DNS zone from master servers.”
Read the explainer
Microsoft states: “The Remove-DnsServerZoneTransferPolicy cmdlet removes a zone transfer policy from a Domain Name System (DNS) server.”
Read the guide
Microsoft states: “The Add-DnsServerRecursionScope cmdlet adds a recursion scope on a Domain Name System (DNS) server.”
Read the playbook
Microsoft states: “Retrieves DNS server encryption protocol settings for DNS over HTTPS (DoH) on Windows Server 2025 or later.”
Read the briefing
Microsoft states: “The Add-DnsServerRootHint cmdlet adds root hints on a Domain Name System (DNS) server.”
Read the checklist
Microsoft states: “Removes a policy for query resolution from a DNS server.” It also states: “The Remove-DnsServerQueryResolutionPolicy cmdlet removes a policy for query resolution from a Domain Name System (DNS) server.”
Read the explainer