Separate pre-logon device VPN from user VPN requirements
Which Always On VPN profile is needed before a user signs in?
Read the guideDSE security knowledge hubNetworks & Infrastructure
Networks & Infrastructure
Knowledge
Page 79 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Networks & Infrastructure knowledge center
Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.
DSE post stream
1,594 articlesNetworks & Infrastructure
Review accepted VPN protocols after installing or upgrading RRAS
Why should a new RRAS deployment and an upgraded server be checked separately?
Read the guide
Scope Monitoring Active Directory for Signs of Compromise in observed AD/DNS state
Microsoft states: “Law Number Five: Eternal vigilance is the price of security. - 10 Immutable Laws of Security Administration).”
Read the briefing
Validate Attractive Accounts for Credential Theft with AD/DNS evidence
Microsoft states: “Depending on the system configuration, these credentials can be extracted in the form of hashes, tickets, or even plaintext passwords.”
Read the checklist
Stage Verify DNS Functionality to Support Directory Replication with AD/DNS rollback checks
Microsoft states: “To check Domain Name System (DNS) settings that might interfere with Active Directory replication, you can begin by running the basic test that ensures that DNS is operating properly for your domain.”
Read the explainer
Trace Securing Domain Controllers Against Attack across Active Directory and Windows DNS
Microsoft states: “Law #3: If a bad actor has unrestricted physical access to your computer, it’s not your computer anymore. - Ten Immutable Laws of Security (Version 2.0).”
Read the guide
Review System Audit Policy recommendations before AD/DNS changes
Microsoft states: “This article covers the Windows audit policy settings and Microsoft’s baseline and advanced recommendations for both workstations and servers.”
Read the playbook
Scope Best practices for securing Active Directory in observed AD/DNS state
Microsoft states: “Attacks against computing infrastructure have increased over the last decade in all parts of the world.”
Read the briefing
Validate Replication error 1753 There are no more endpoints available from the endpoint mapper with AD/DNS evidence
Microsoft states: “This article describes symptoms, cause and resolution steps for Active Directory operations that fail with Win32 error 1753: "There are no more endpoints available from the endpoint mapper."”
Read the checklist
Stage Maintaining a More Secure Environment with AD/DNS rollback checks
Microsoft states: “Law Number Ten: Technology isn’t a panacea. - 10 Immutable Laws of Security Administration).”
Read the explainer