AD FS DKM container hardening
Any two versions this installation kept of the page, compared the same way as each observed change. All guidance changes · Latest observation
What changed
18 new passages (about 1020 words), 12 edited passages (179 words changed), 27 removed passages (about 610 words). The changed wording mentions dates and deadlines, defaults, prerequisites, permissions, supported platforms, mitigations, settings and controls. Review the source to confirm the effect.
May need admin actionCheck whether new requirements apply to your setup; check whether a default changed for your tenant or devices; check the roles and permissions you grant.
[removed: Note]Original publish date: July 14, 2026 …
[added: Opting out of automatic remediation]
[added: Ownership failure event case (Event ID 1137)]
Event reference[added: s]
[added: Change log]
Short quotes of Microsoft's changed wording from Microsoft source, © Microsoft Corporation. Read the page for the full text.
Sections to inspect
- CVE-2026-56155: AD FS Distributed Key Manager container ACL hardening
- In this article
- Summary
- Take action
- Expected secure state changes
- Opting out of automatic remediation
- Ownership failure event case (Event ID 1137)
- Save the previous SDDL (Recommended)
- How to restore the previous ACL
- Event references
- Change log
- How to manage this change
Read the current Microsoft source
Compared across every change between the two versions, so an edit made and later undone does not show. Observation time is not publication time. Full source bodies are not published; as the page's license allows, only Microsoft's changed wording is shown.