Merge pull request #8129 from MicrosoftDocs/main

Auto Publish – main to live - 2026-07-01 17:30 UTC

Author: learn-build-service-prod[bot]

WindowsServerDocs/identity/TOC.yml

@@ -393,6 +393,8 @@
                   href: ad-ds/manage/group-managed-service-accounts/group-managed-service-accounts/configure-kerberos-delegation-group-managed-service-accounts.md
             - name: Delegation of Control in Active Directory Domain Services
               href: ad-ds/manage/delegation-control-wizard.md
+            - name: AD DS Tier Model for tiered administration
+              href: ad-ds/tier-model.md
             - name: Best Practices for Securing Active Directory
               href: ad-ds/plan/security-best-practices/Best-Practices-for-Securing-active-directory.md
               items:

WindowsServerDocs/identity/ad-ds/manage/delegation-control-wizard.md

@@ -61,4 +61,5 @@ To use the Delegation of Control Wizard, perform the following steps:
 ## Related content
 
 - [Delegating Administration by Using OU Objects](../plan/Delegating-Administration-by-Using-OU-Objects.md)
+- [Tier Model for Active Directory Domain Services](../tier-model.md)
 - [Setting up delegated Managed Service Accounts](../../../security/delegated-managed-service-accounts/delegated-managed-service-accounts-set-up-dmsa.md)

WindowsServerDocs/identity/ad-ds/media/tier-model/cyber-attack-kill-chain.png

@@ -282,3 +282,8 @@ From any member server or workstation affected by the GPO changes, log on locall
 5.  A dialog box similar to the following should appear.
 
     ![Screenshot that shows the message that indicates the sign-in method you're using isn't allowed.](media/Appendix-F--Securing-Domain-Admins-Groups-in-Active-Directory/SAD_78.gif)
+
+## Related content
+
+- [Tier Model for Active Directory Domain Services](../../tier-model.md)
+