ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 271/271 feeds/APIs · 464/464 docs · 8/9 advisories · checked 04:30 UTC Customize Public modeDiscuss ChangeIntel on Discord

AD FS DKM container hardening

Timelines and exceptions · All guidance changes

Windows Server · Official Microsoft guidanceObserved changes retained

Retained observation

Source metadata changed; retained article content is unchanged.

Documentation metadata only

Read the current Microsoft source · Link to this observation · Compare any two versions

Observation details · observed 23 Oct 09:22 UTC
Observed by ChangeIntel
23 Oct 09:22 UTC
Source update metadata
13 Oct 17:29 UTC
Source review date
2026-07-14
First observed on this installation
12 Oct 19:19 UTC
Last successful check
today 04:15 UTC
Next check due
today 10:15 UTC

Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.

Watch this page to review its changes in My radar.

Timeline

From the capture of 23 Oct 09:22 UTC
Every published date has passed 13 Oct 2026 most recent · 13 days ago
  1. Opt-in14 Jul 2026 Now: You can turn it on early; the default is unchanged
  1. 3 months agoOpt-in
    • SummaryMilestone
      The Access Control List (ACL) on the Distributed Key Manager (DKM) container entered its first hardening phase with the July…
  2. 13 days ago
    • SummaryMilestone
      RemediateDkmAclCVE-2026-56155

Settings and overrides named on this page

Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.

Relative periods

Counted from an event the source describes, such as installing an update; they are not calendar dates.

  • every 24 hoursTake actionException1 condition
    RemediateDkmAcl
  • every 24 hours · within 24 hoursEvent textin Event referencesRequirementExceptionRecommendationTentative3 conditions
    RemediateDkmAcl

Requirements, exceptions and scope

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

  1. No longer on the page How to manage this changeseen by ChangeIntel
  2. Exception added Take actionseen by ChangeIntel
    every 24 hours
  3. No longer on the page How to manage this changeseen by ChangeIntel
    October 2026
  4. No longer on the page How to manage this changeseen by ChangeIntel
    October 2026
  5. New dated step Summaryseen by ChangeIntel
    July 14, 2026
  6. No longer on the page Summaryseen by ChangeIntel
    July 14, 2026
  7. New dated step Summaryseen by ChangeIntel
    October 13, 2026
  8. No longer on the page How to manage this changeseen by ChangeIntel
  9. No longer on the page How to manage this changeseen by ChangeIntel
  10. Recommendation added In this articleseen by ChangeIntel
  11. Requirement added Opting out of automatic remediationseen by ChangeIntel
  12. Recommendation added Save the previous SDDL (Recommended)seen by ChangeIntel
18 earlier changes
  1. Recommendation added Save the previous SDDL (Recommended)seen by ChangeIntel
  2. Recommendation added Save the previous SDDL (Recommended)seen by ChangeIntel
  3. Recommendation added Save the previous SDDL (Recommended)seen by ChangeIntel
  4. Recommendation added Save the previous SDDL (Recommended)seen by ChangeIntel
  5. Recommendation added Take actionseen by ChangeIntel
  6. No longer on the page Event textin Event referenceseen by ChangeIntel
  7. No longer on the page How to manage this changeseen by ChangeIntel
  8. No longer on the page How to manage this changeseen by ChangeIntel
  9. No longer on the page How to manage this changeseen by ChangeIntel
  10. Requirement added How to restore the previous ACLseen by ChangeIntel
  11. Requirement added Ownership failure event case (Event ID 1137)seen by ChangeIntel
  12. Requirement added Ownership failure event case (Event ID 1137)seen by ChangeIntel
  13. Requirement added Take actionseen by ChangeIntel
  14. Requirement added Take actionseen by ChangeIntel
  15. Requirement added 1133in Take actionseen by ChangeIntel
  16. Requirement added 1137in Take actionseen by ChangeIntel
  17. Requirement added Take actionseen by ChangeIntel
  18. No longer on the page How to manage this changeseen by ChangeIntel
Observed history and review priority

Captured 23 Oct 09:22 UTC; extracted 23 Oct 09:22 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d.

Review priority. Previously extracted guidance is missing from a later capture · Extracted assertions require review · Publisher marks guidance tentative · Applicability or exceptions require review

0 date changes and 0 condition changes across 2 compared revisions. Suggested check interval: 6 hours.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 3

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

Suggested by a shared curated topic and product; not a verified connection (6 items)

Retained observations

  • 23 Oct 09:22 UTC · shown above
  • 19 Oct 00:53 UTC

    18 new passages (about 1020 words), 12 edited passages (179 words changed), 27 removed passages (about 610 words). The changed wording mentions dates and deadlines, defaults, prerequisites, permissions, supported platforms, mitigations, settings and controls. Review the source to confirm the effect.

  • 12 Oct 19:19 UTC

    Baseline for retained history; no earlier retained text to compare.

What changed

First observed 18 Oct 2026
  1. 19 Oct 2026 · 00:55:08 UTC How to manage this changeOctober 2026 · Audit / monitor → No longer listed in this observation. Previously: October 2026 · Audit / monitor
  2. 19 Oct 2026 · 00:55:08 UTC Relative periodswithin 24 hours → every 24 hours; within 24 hours
  3. 19 Oct 2026 · 00:55:08 UTC Summary (2)13 Oct 2026
  4. 19 Oct 2026 · 00:55:08 UTC Summary14 Jul 2026 → 14 Jul 2026 · Opt-in
  5. 19 Oct 2026 · 00:55:08 UTC SummaryMicrosoft's guidance publishes 2 dates, from 14 Jul 2026 to October 2026 (How to manage this change). → Microsoft's guidance publishes 2 dates, from 14 Jul 2026 to 13 Oct 2026 (Summary).

The most recent 100 field changes are listed. Complete recorded revisions are kept separately.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 26 Oct 04:30 UTC · 271 of 271 readable · 269 fully read · documentation 464/464 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.