DSE security knowledge hub

Networks & Infrastructure
Knowledge

Page 84 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.

DSE-authoredOfficial sourcesReviewed guidance
Search the library
Explore this topic

Networks & Infrastructure knowledge center

Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.

Start with the cornerstone guide
DSE post stream

Networks & Infrastructure

1,594 articles
DSE visual briefIdentity & cloud

Trace Active Directory LDAP client performance counters in Windows Server across Active Directory and Windows DNS

Microsoft states: “Beginning with Windows Server 2025, you can use Active Directory Lightweight Directory Access Protocol (LDAP) client performance counters to monitor the performance of LDAP clients.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the guide
DSE visual briefIdentity & cloud

Review Appendix G - Securing Administrators Groups in Active Directory before AD/DNS changes

Microsoft states: “As is the case with the Enterprise Admins (EA) and Domain Admins (DA) groups, membership in the built-in Administrators (BA) group should be required only in build or disaster recovery scenarios.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the playbook
DSE visual briefIdentity & cloud

Scope Active Directory DC Locator performance counters in Windows Server in observed AD/DNS state

Microsoft states: “Beginning with Windows Server 2025, you can use Active Directory Domain Service Domain Controller (DC) Locator performance counters to monitor the performance of DC locator clients.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the briefing
DSE visual briefNetworks & infrastructure

Review Appendix H - Securing Local Administrator Accounts and Groups before AD/DNS changes

Microsoft states: “On all versions of Windows currently in mainstream support, the local Administrator account is disabled by default, which makes the account unusable for pass-the-hash and other credential theft attacks.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the playbook
DSE visual briefIdentity & cloud

Scope Learn about upgrading your domain and forest functional levels in Active Directory Domain Services. in observed AD/DNS state

Microsoft states: “Before you can raise domain and forest functional levels, evaluate your current environment and identify your target functional level.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the briefing
DSE visual briefIdentity & cloud

Stage Group Managed Service Accounts with AD/DNS rollback checks

Microsoft states: “This article for IT professionals introduces the group Managed Service Account (gMSA) by describing practical applications, changes in Microsoft’s implementation, and hardware and software requirements.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the explainer