Remove-ADComputerServiceAccount: remove adcomputer service account with before-and-after evidence
Microsoft states: “The Remove-ADComputerServiceAccount cmdlet removes service accounts from an Active Directory computer.”
Read the guideDSE security knowledge hubNetworks & Infrastructure
Networks & Infrastructure
Knowledge
Page 97 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Networks & Infrastructure knowledge center
Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.
DSE post stream
1,594 articlesNetworks & Infrastructure
Get-ADGroupMember: inventory adgroup member with bounded evidence
Microsoft states: “The Get-ADGroupMember cmdlet gets the members of an Active Directory group.”
Read the playbook
Clear-ADAccountExpiration: clear adaccount expiration under AD/DNS change control
Microsoft states: “The Clear-ADAccountExpiration cmdlet clears the expiration date for an Active Directory user or computer account.”
Read the briefing
Add-ADComputerServiceAccount: stage additions to adcomputer service account with rollback checks
Microsoft states: “Adds one or more service accounts to an Active Directory computer.”
Read the checklist
Remove-ADComputer: remove adcomputer against recorded identity and DNS state
Microsoft states: “The Identity parameter specifies the Active Directory computer to remove.”
Read the explainer
Set-ADForest: change adforest with before-and-after evidence
Microsoft states: “The Set-ADForest cmdlet modifies the properties of an Active Directory forest.”
Read the guide
Get-ADAccountAuthorizationGroup: inventory adaccount authorization group with bounded evidence
Microsoft states: “The Get-ADAccountAuthorizationGroup cmdlet gets the security groups from the specified user, computer, or service accounts token.”
Read the playbook
Get-ADDomain: inventory addomain under AD/DNS change control
Microsoft states: “The Get-ADDomain cmdlet gets the Active Directory domain specified by the parameters.”
Read the briefing
Get-ADForest: inventory adforest with rollback checks
Microsoft states: “You can specify the forest by setting the Identity or Current parameters.”
Read the checklist
Install-ADServiceAccount: install adservice account against recorded identity and DNS state
Microsoft states: “Installs an Active Directory managed service account on a computer or caches a group managed service account on a computer.”
Read the explainer