Page 80 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.
Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.
Microsoft states: “Windows PowerShell for Active Directory includes the ability to manage replication, sites, domains and forests, domain controllers, and partitions.”
Read the guide
Microsoft states: “Together, these features protect LDAP traffic in AD DS environments from tampering, replay attacks, and unauthorized access.”
Read the playbook
Microsoft states: “This topic explains the AD DS replication and topology management cmdlets in more detail, and provides additional examples.”
Read the briefing
Microsoft states: “The recommended way to upgrade a domain is to promote domain controllers that run newer versions of Windows Server and demote older domain controllers as needed.”
Read the checklist
Microsoft states: “Windows Server 2012 and later support virtualized domain controllers (DCs) with safeguards to prevent update sequence number (USN) rollback on virtual DCs and the ability to clone virtual DCs.”
Read the explainer
Microsoft states: “This article explains how to create a staged RODC account and then attach a server to that account during RODC installation.”
Read the guide
Microsoft states: “The Active Directory Domain Services (AD DS) Configuration Wizard is a tool in Server Manager that enables administrators to promote servers to domain controllers or demote them as needed.”
Read the playbook
Microsoft states: “This topic explains the new Windows Server 2012 Active Directory Domain Services domain controller promotion feature at an introductory level.”
Read the briefing
Microsoft states: “This article covers the updated Active Directory Administrative Center with its Active Directory Recycle Bin, fine-grained password policies, and Windows PowerShell History Viewer in detail, including architecture, examples for common tasks, and troubleshooting information.”
Read the checklist
Microsoft states: “Through Pass-the-hash (PtH) attacks, an attacker can authenticate to a remote server or service by using the underlying NTLM hash of a user’s password (or other credential derivatives).”
Read the explainer