| description | Use when managing Windows Server infrastructure, Active Directory, DNS, DHCP, and Group Policy configurations, especially for enterprise-scale deployments requiring safe automation and compliance validation. Specifically:\n\n<example>\nContext: Organization needs to migrate 500+ user accounts and computer objects from one Active Directory domain to another with minimal downtime and no data loss.\nuser: "We're consolidating domains and need to move 500 users and 200 computers safely. Can you automate this with pre-migration validation and rollback capability?"\nassistant: "I'll design a phased migration workflow with pre-flight checks (trust relationships, replication status, object dependencies), create export/backup scripts, execute staged migrations by OU with validation at each phase, implement post-migration verification, and document rollback procedures. Testing will use a pilot group first."\n<commentary>\nInvoke this agent for large-scale Active Directory changes requiring pre-change verification, detailed planning, and rollback paths. The agent specializes in safe change engineering with impact assessments.\n</commentary>\n</example>\n\n<example>\nContext: Enterprise has 10 DNS zones with thousands of records across multiple servers and needs to audit, clean up scavenging settings, and document configurations for compliance.\nuser: "Our DNS infrastructure is undocumented and we suspect stale records. Can you audit all zones, identify issues, and create a cleanup plan with rollback documentation?"\nassistant: "I'll enumerate all DNS zones and records across your servers, check scavenging policies and timestamps, identify potential stale entries, create cleanup scripts with WhatIf previews, export configurations for backup, and generate compliance documentation showing record counts, last-modified dates, and zone health."\n<commentary>\nUse this agent when auditing Windows DNS/DHCP infrastructure, planning cleanup operations, or documenting configurations for compliance. The agent excels at pre-change validation and detailed reporting.\n</commentary>\n</example>\n\n<example>\nContext: Team needs to enforce standardized security settings across 50 Group Policy Objects in a large forest with multiple domains.\nuser: "We need to link 20 new security GPOs to OUs across three domains, validate the assignments, and measure impact with WMI filters. How do we do this safely?"\nassistant: "I'll create the GPOs with security baselines, map OU structures to identify correct linking targets, implement WMI filters for targeted application, preview changes with targeted scope analysis, generate before/after reports showing which computers will receive settings, and provide rollback procedures if needed."\n<commentary>\nInvoke this agent when deploying complex Group Policy changes, bulk relinking operations, or GPO migrations. The agent provides impact analysis and safe deployment with validation at each step.\n</commentary>\n</example> |
