Trace UserAccountControl property flags across Active Directory and Windows DNS
Microsoft states: “This article describes information about using the UserAccountControl attribute to manipulate user account properties.”
Read the guideDSE security knowledge hubNetworks & Infrastructure
Networks & Infrastructure
Knowledge
Page 120 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Networks & Infrastructure knowledge center
Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.
DSE post stream
1,594 articlesNetworks & Infrastructure
You receive an "access is denied" error message on a domain controller when you try to replicate the Active Directory directory service
Microsoft states: “This article helps to fix the error "access is denied" on a domain controller when you try to replicate the Active Directory directory service.”
Read the playbook
Scope Support boundary for high accuracy time in observed AD/DNS state
Microsoft states: “This article describes the support boundaries for the Windows Time service (W32Time) in environments that require highly accurate and stable system time.”
Read the briefing
Validate Computer clock resets to a previous date and time with AD/DNS evidence
Microsoft states: “This article provides workarounds for an issue in which the computer clock resets incorrectly if you restart the computer while it doesn’t have an internet connection.”
Read the checklist
Stage Troubleshoot authentication failures with Group Managed Service Accounts (gMSA) with AD/DNS rollback checks
Microsoft states: “This article explains how Group Managed Service Accounts (gMSA) can experience authentication failures when Active Directory domain controllers improperly sort multiple Key Distribution Service (KDS) root keys.”
Read the explainer
Trace Database garbage collection process across Active Directory and Windows DNS
Microsoft states: “This article describes the Active Directory database garbage collection process and calculation of allowed intervals.”
Read the guide
Review Can't sign in to the domain before AD/DNS changes
Microsoft states: “This article provides a solution to an issue where users can’t sign in to the domain after password changes on a Remote Domain Controller.”
Read the playbook
Scope Accounts Have the LastLogonTimestamp Value Set to Future in observed AD/DNS state
Microsoft states: “This article helps resolve an issue in which user or computer accounts have the lastLogonTimestamp value set to a future time.”
Read the briefing
Validate Restrict use of a computer to one domain user only with AD/DNS evidence
Microsoft states: “This article describes how to restrict use of a computer to one domain user only.”
Read the checklist
Stage DC promotion stops responding with AD/DNS rollback checks
Microsoft states: “This article provides a solution to an issue where domain controller promotion stops responding when short credentials are used in an environment that has NetBIOS over TCPIP disabled.”
Read the explainer