ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 416/439 docs · checked 22:55 UTC Customize Public modeDiscuss ChangeIntel on Discord

AD FS DKM container hardening

Timelines and exceptions

Timeline

From the capture of 19 Oct 00:53 UTC
Every published date has passed 13 Oct 2026 most recent · 7 days ago
  1. Opt-in14 Jul 2026 Now: You can turn it on early; the default is unchanged
  1. 3 months agoOpt-in
    • SummaryMilestone
      The Access Control List (ACL) on the Distributed Key Manager (DKM) container entered its first hardening phase with the July…
  2. 7 days ago
    • SummaryMilestone
      RemediateDkmAclCVE-2026-56155

Settings and overrides named on this page

Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.

Relative periods

Counted from an event the source describes, such as installing an update; they are not calendar dates.

  • every 24 hoursTake actionException1 condition
    RemediateDkmAcl
  • every 24 hours · within 24 hoursEvent textin Event referencesRequirementExceptionRecommendationTentative3 conditions
    RemediateDkmAcl

Requirements, exceptions and scope

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

  1. No longer on the page How to manage this changeseen by ChangeIntel
  2. Exception added Take actionseen by ChangeIntel
    every 24 hours
  3. No longer on the page How to manage this changeseen by ChangeIntel
    October 2026
  4. No longer on the page How to manage this changeseen by ChangeIntel
    October 2026
  5. New dated step Summaryseen by ChangeIntel
    July 14, 2026
  6. No longer on the page Summaryseen by ChangeIntel
    July 14, 2026
  7. New dated step Summaryseen by ChangeIntel
    October 13, 2026
  8. No longer on the page How to manage this changeseen by ChangeIntel
  9. No longer on the page How to manage this changeseen by ChangeIntel
  10. Recommendation added In this articleseen by ChangeIntel
  11. Requirement added Opting out of automatic remediationseen by ChangeIntel
  12. Recommendation added Save the previous SDDL (Recommended)seen by ChangeIntel
18 earlier changes
  1. Recommendation added Save the previous SDDL (Recommended)seen by ChangeIntel
  2. Recommendation added Save the previous SDDL (Recommended)seen by ChangeIntel
  3. Recommendation added Save the previous SDDL (Recommended)seen by ChangeIntel
  4. Recommendation added Save the previous SDDL (Recommended)seen by ChangeIntel
  5. Recommendation added Take actionseen by ChangeIntel
  6. No longer on the page Event textin Event referenceseen by ChangeIntel
  7. No longer on the page How to manage this changeseen by ChangeIntel
  8. No longer on the page How to manage this changeseen by ChangeIntel
  9. No longer on the page How to manage this changeseen by ChangeIntel
  10. Requirement added How to restore the previous ACLseen by ChangeIntel
  11. Requirement added Ownership failure event case (Event ID 1137)seen by ChangeIntel
  12. Requirement added Ownership failure event case (Event ID 1137)seen by ChangeIntel
  13. Requirement added Take actionseen by ChangeIntel
  14. Requirement added Take actionseen by ChangeIntel
  15. Requirement added 1133in Take actionseen by ChangeIntel
  16. Requirement added 1137in Take actionseen by ChangeIntel
  17. Requirement added Take actionseen by ChangeIntel
  18. No longer on the page How to manage this changeseen by ChangeIntel
Observed history and review priority

Captured 19 Oct 00:53 UTC; extracted 19 Oct 00:54 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c.

Review priority. Previously extracted guidance is missing from a later capture · Extracted assertions require review · Publisher marks guidance tentative · Applicability or exceptions require review · A published date window is near

0 date changes and 0 condition changes across 1 compared revisions. Suggested check interval: 6 hours.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 2

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 22:55 UTC · 258 of 260 readable · 256 fully read · documentation 416/439 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.