Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 416/439 docs · checked 22:55 UTC Customize Public modeDiscuss ChangeIntel on Discord

Defender for Identity deployment

Timelines and exceptions · All guidance changes

Defender · Official Microsoft guidanceObserved changes retained

Observed content change

4 edited passages (51 words changed). The changed wording mentions dates and deadlines, prerequisites, permissions, supported platforms, network endpoints. Review the source to confirm the effect.

May need admin actionCheck your firewall and proxy allow lists; check whether new requirements apply to your setup; check the roles and permissions you grant.

Requirement wordingSupport wordingDate or deadline wordingEndpoint wording
EditedSelect your deployment method
[removed: For e][added: E]ligible domain [removed: controllers] [added: controllers, AD FS, AD CS, and Microsoft Entra Connect servers] running Windows Server 2019 or [removed: later,] [added: later support] sensor [removed: v3.x supports onboarding] [added: v3.x. You can onboard these servers] with or without Microsoft Defender for Endpoint deployment. [removed: Other eligible identity-role servers require Defender for Endpoint onboarding.]
EditedSelect your deployment method
… for Endpoint, activate sensor v3.x directly. [removed: For domain controllers that aren't onboarded to Defender for Endpoint,] [added: Otherwise,] use the sensor v3.x onboarding package. [removed: AD FS, AD CS, and Microsoft Entra Connect servers must be onboarded to Defender for Endpoint before activation.] Any supported server type Windows Server …
EditedSelect your deployment method
… onboarding through Defender for Endpoint. Eligible [removed: domain controllers] [added: servers] can instead use the sensor v3.x …
EditedChoose a deployment flow
If an eligible [removed: domain controller] [added: server] isn't onboarded to Defender for Endpoint, …

Short quotes of Microsoft's changed wording from Microsoft source, © Microsoft Corporation. Read the page for the full text.

Read the current Microsoft source · Link to this observation · Compare any two versions

Sections to inspect

Up to 12 section headings from retained before/after evidence. The current source may have changed again.

Why this was flagged

The changed words, with a few words around them, matched these rule categories: dates and deadlines, prerequisites, permissions, supported platforms, network endpoints. These matches identify subjects to assess; they do not establish a policy change or applicability.

Observation details · observed today 12:46 UTC
Observed by ChangeIntel
today 12:46 UTC
Source update metadata
today 12:39 UTC
First observed on this installation
8 Oct 23:13 UTC
Last successful check
today 18:58 UTC
Next check due
21 Oct 00:58 UTC

Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.

Watch this page to review its changes in My radar.

Timeline

From the capture of today 12:46 UTC
  1. or later; update release September 2026 Published timing is qualified; effectiveness is not confirmed.
  1. 2 weeks agomonth windowupdate release · Patch Tuesday 8 Sep 2026

Requirements, exceptions and scope

  • GuidanceExceptionScope1 condition1 passage
    Install Defender for Identity sensors on all domain controllers, including read-only domain controllers (RODCs). Also install sensors on Active Directory Federation Services (AD FS), Active…
  • Select your deployment methodRequirementScopeRecommendation1 condition2 passages
  • Review action cardsRequirement1 condition2 passages
  • Choose a deployment flowException1 condition1 passage

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

  1. No longer on the page Any supported server typein Select your deployment methodseen by ChangeIntel
    September 2026 or later
  2. Scope added Select your deployment methodseen by ChangeIntel
  3. Postponed +2 months Any supported server typein Select your deployment methodseen by ChangeIntel
    July 2026 or laterSeptember 2026 or later
Observed history and review priority

Captured today 12:46 UTC; extracted today 12:46 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c.

Review priority. Dates changed in observed revisions · Previously extracted guidance is missing from a later capture · Extracted assertions require review · Applicability or exceptions require review

1 date changes and 0 condition changes across 2 compared revisions. Suggested check interval: 6 hours.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 4

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

No related evidence found in this installation's recent collection. This does not establish that no announcement exists.

Retained observations

  • today 12:46 UTC · shown above
  • 18 Oct 23:50 UTC

    1 new passage (about 20 words), 2 edited passages (21 words changed), 1 removed passage (12 words). The changed wording mentions dates and deadlines, prerequisites, supported platforms. Review the source to confirm the effect.

  • 12 Oct 23:53 UTC

    8 removed passages (about 50 words). The changed wording mentions prerequisites. Review the source to confirm the effect.

  • 8 Oct 23:13 UTC

    Baseline for retained history; no earlier retained text to compare.

What changed

First observed 18 Oct 2026
  1. 18 Oct 2026 Any supported server typeJuly 2026 or later → September 2026 or later
  2. 18 Oct 2026 SummaryMicrosoft's guidance publishes 1 date, from July 2026 to July 2026 (Any supported server type). → Microsoft's guidance publishes 1 date, from September 2026 to September 2026 (Any supported server type).

The most recent 100 field changes are listed. Complete recorded revisions are kept separately.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 22:55 UTC · 258 of 260 readable · 256 fully read · documentation 416/439 current