Trace Configure W32Time against huge time offset across Active Directory and Windows DNS
Microsoft states: “This article describes how to configure the Windows Time service against a large time offset.”
Read the guideDSE security knowledge hubNetworks & Infrastructure
Networks & Infrastructure
Knowledge
Page 112 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Networks & Infrastructure knowledge center
Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.
DSE post stream
1,594 articlesNetworks & Infrastructure
Review Troubleshoot common AD replication errors before AD/DNS changes
Microsoft states: “This article contains information and links to help you troubleshoot Active Directory Replication errors.”
Read the playbook
Scope Enable Lightweight Directory Access Protocol (LDAP) over Secure Sockets Layer (SSL) in observed AD/DNS state
Microsoft states: “This article describes how to enable Lightweight Directory Access Protocol (LDAP) over Secure Sockets Layer (SSL) with a third-party certification authority.”
Read the briefing
Validate Restore user accounts and groups in AD with AD/DNS evidence
Microsoft states: “This article provides information on how to restore deleted user accounts and group memberships in Active Directory.”
Read the checklist
Stage How to detect and recover from a USN rollback in a Windows Server-based domain controller with AD/DNS rollback checks
Microsoft states: “This article describes how to detect and recover if a Windows Server domain controller is incorrectly rolled back by using an image-based installation of the operating system.”
Read the explainer
Trace Secure Time Seeding Recommendations for Windows Server across Active Directory and Windows DNS
Microsoft states: “This article provides recommendations for the Secure Time Seeding (STS) feature in Windows Server, along with general good time synchronization practices.”
Read the guide
Review Transfer or seize Operation Master roles before AD/DNS changes
Microsoft states: “This article describes when and how to transfer or seize Operation Master roles, formerly known as Flexible Single Master Operations (FSMO) roles.”
Read the playbook
Scope Redirect users and computers containers in observed AD/DNS state
Microsoft states: “You can use redirusr and redircmp to redirect user, computer, and group accounts that are created by earlier-version APIs.”
Read the briefing
Validate Active Directory Flexible Single Master Operation (FSMO) roles in Windows with AD/DNS evidence
Microsoft states: “This article mainly helps you to learn about the Flexible Single Master Operation (FSMO) roles in Active Directory.”
Read the checklist
Stage Best Practices for Active Directory Domains that Use Single-label DNS Names with AD/DNS rollback checks
Microsoft states: “This article provides information about the deployment and operation of Active Directory Domain Services (AD DS) domains that use single-label DNS names.”
Read the explainer