Trace Configure DNS aging and scavenging in Windows Server across Active Directory and Windows DNS
Microsoft states: “Aging and scavenging remove stale resource records that accumulate in zone data over time.”
Read the guideDSE security knowledge hubNetworks & Infrastructure
Networks & Infrastructure
Knowledge
Page 89 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Networks & Infrastructure knowledge center
Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.
DSE post stream
1,594 articlesNetworks & Infrastructure
Review Install and Configure DNS Server on Windows Server before AD/DNS changes
Microsoft states: “Domain Name System (DNS) is essential for translating domain names into IP addresses, enabling network connectivity and resource access.”
Read the playbook
Scope Use DNS Policy for Geo-Location Based Traffic Management with Primary Servers in observed AD/DNS state
Microsoft states: “Important: This scenario illustrates how to deploy DNS policy for geo-location based traffic management when you are using only primary DNS servers.”
Read the briefing
Validate DNS Responses Based on Time of Day with an Azure Cloud App Server with AD/DNS evidence
Microsoft states: “You can use this topic to learn how to distribute application traffic across different geographically distributed instances of an application by using DNS policies that are based on the time of day.”
Read the checklist
Stage Enable DNS over HTTPS in DNS Server on Windows Server with AD/DNS rollback checks
Microsoft states: “This article explains how to enable DNS over HTTPS (DoH) in the DNS Server service running on Windows Server.”
Read the explainer
Set-ADFineGrainedPasswordPolicy: change adfine grained password policy with before-and-after evidence
Microsoft states: “The Set-ADFineGrainedPasswordPolicy cmdlet modifies the properties of an Active Directory fine-grained password policy.”
Read the guide
Set-ADReplicationSite: change adreplication site with bounded evidence
Microsoft states: “The Set-ADReplicationSite cmdlet is used to set the properties for an Active Directory site that is being used for replication.”
Read the playbook
Set-ADAuthenticationPolicy: change adauthentication policy under AD/DNS change control
Microsoft states: “The Set-ADAuthenticationPolicy cmdlet modifies the properties of an Active Directory® Domain Services authentication policy.”
Read the briefing
Get-ADFineGrainedPasswordPolicy: inventory adfine grained password policy with rollback checks
Microsoft states: “The Get-ADFineGrainedPasswordPolicy cmdlet gets a fine-grained password policy or performs a search to retrieve multiple fine-grained password policies.”
Read the checklist
Set-ADReplicationSiteLink: change adreplication site link against recorded identity and DNS state
Microsoft states: “The Set-ADReplicationSiteLink cmdlet sets properties on an Active Directory site link.”
Read the explainer