Defender for Identity on AD FS, AD CS and Entra Connect servers
Retained observation
Source metadata changed; retained article content is unchanged.
Read the current Microsoft source · Link to this observation · Compare any two versions
Observation details · observed 24 Oct 00:41 UTC
- Observed by ChangeIntel
- 24 Oct 00:41 UTC
- Source update metadata
- 18 Oct 17:35 UTC
- First observed on this installation
- 8 Oct 23:13 UTC
- Last successful check
- today 00:51 UTC
- Next check due
- 27 Oct 00:51 UTC
Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.
Watch this page to review its changes in My radar.
Timeline
From the capture of 24 Oct 00:41 UTC- 6 undated sections
- 5 with conditions
Requirements, exceptions and scope
- Install and configure sensors on non-domain-controller serversRequirementException2 conditions2 passages
Deploying the Defender for Identity sensor v3.x on AD FS, AD CS, and Microsoft Entra Connect servers that aren't domain controllers is in preview. Use…
- Configure permissions for the Microsoft Entra Connect (ADSync) databaseRequirementExceptionRecommendation3 conditions2 passages
Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.
Observed history and review priority
Captured 24 Oct 00:41 UTC; extracted 24 Oct 00:41 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d.
Review priority. Extracted assertions require review · Applicability or exceptions require review
0 date changes and 0 condition changes across 2 compared revisions. Suggested check interval: 24 hours.
Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.
Retained observations · 4
Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.
- 24 Oct 00:41 UTC · 14 candidates
- 18 Oct 23:50 UTC · 14 candidates
- 12 Oct 23:53 UTC · 14 candidates
- 8 Oct 23:13 UTC · 13 candidates
Related public evidence
- Public source · September 2026Sensor v3.x support for additional identity server roles: AD CS, AD FS, and Entra Connect (Preview)
- Public source · August 2026Expanded automatic auditing support for AD CS, AD FS, and Entra Connect servers
Retained observations
- 24 Oct 00:41 UTC · shown above
- 18 Oct 23:50 UTC
1 new passage (17 words), 2 edited passages (4 words changed). The changed wording mentions prerequisites. Review the source to confirm the effect.
- 12 Oct 23:53 UTC
The page title or its body outside the tracked passages changed. Review the source for its effect.
- 8 Oct 23:13 UTC
Baseline for retained history; no earlier retained text to compare.
What changed
First observed 18 Oct 2026No field changes are shown for this selection.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.