Page 129 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.
Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.
Microsoft states: “This article provides a workaround for an issue that occurs after you install Active Directory Domain Services on a new full or read-only Windows Server 2008-based domain controller.”
Read the guide
Microsoft states: “Windows 10, version 1709, Windows Server, version 2004 and later versions of Windows no longer support the syskey.exe utility.”
Read the playbook
DNAME substitution replaces only the whole suffix labels that match the DNAME owner with the labels in the DNAME target. A DNAME redirects names below its owner; unlike a CNAME, it does not redirect the DNAME owner name itself.
Read the briefing
An SRV record identifies a service endpoint with priority, weight, port, and target fields. A client first selects reachable SRV targets with the lowest priority value, then uses weight to choose among targets at that priority.
Read the checklist
An IDNA label passes the Bidi Rule only if all six conditions in the rule are satisfied. The first character determines direction: R or AL makes an RTL label, while L makes an LTR label. An RTL label cannot contain both European-number and Arabic-number Bidi properties.
Read the explainer
In the DHCPv4 Client FQDN option, S requests server responsibility for the A-record update, N requests no server updates, and O reports that the server overrode the requested S value. A client requesting server-performed forward updates sets S to 1 and sets O and N to 0 in its Client FQDN option.
Read the guide
A zone’s serial must be changed whenever its data changes; otherwise, secondaries will not transfer the new zone data. Every delegated name server should answer authoritatively for the zone; a delegated server that does not serve the zone creates a lame delegation.
Read the playbook
A SIG(0) request signature is placed at the end of the additional section and covers the DNS request, including its DNS header but excluding UDP/IP headers.
Read the briefing
Every secure dynamic update carries TSIG or SIG(0) authentication so the primary server can identify the update principal. A TKEY-derived shared secret established without authentication must not be used to authorize secure dynamic updates.
Read the checklist
An AXFR response that transfers a zone consists of one or more DNS messages carrying the zone’s contents. The AXFR message series begins and ends with the same zone SOA; non-SOA records may otherwise arrive in any order or grouping.
Read the explainer