Defender for Identity on AD FS, AD CS and Entra Connect servers
No content change seen yet. Watched since 8 Oct 23:13 UTC, last read 19 Oct 23:56 UTC, next check 20 Oct 23:56 UTC.
Read the Microsoft source · Link to this observation · My radar
Timeline
From the capture of 8 Oct 23:13 UTC · an earlier observationLegacy capture: table structure or oversized sections are unavailable for extraction
Microsoft's revision log on this page · 12 entries
Dates from the page's own change log or history section. They describe earlier edits, not upcoming policy.
- Configure event collectionRequirement
- Configure event collectionRequirement
- Configure event collectionRequirement
- Grant access to the AD FS databaseRequirement
- Grant access to the AD FS databaseRequirement
- Configure permissions for the Microsoft Entra Connect (ADSync) databaseRequirementExceptionRecommendation3 conditions
- Validate successful deploymentRecommendation
IdentityLogonEventsIdentityDirectoryEvents
Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.
Observed history and review priority
Captured 8 Oct 23:13 UTC; extracted 16 Oct 16:10 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c/legacy.
Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.
Retained observations · 3
Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.
- 18 Oct 23:50 UTC · 14 candidates
- 12 Oct 23:53 UTC · 14 candidates
- 8 Oct 23:13 UTC · 15 candidates
Related public evidence
- Public source · 1 Sep 2026Sensor v3.x support for additional identity server roles: AD CS, AD FS, and Entra Connect (Preview)
- Public source · 1 Aug 2026Expanded automatic auditing support for AD CS, AD FS, and Entra Connect servers
Retained observations
- 18 Oct 23:50 UTC
1 new passage (17 words), 2 edited passages (4 words changed). The changed wording mentions prerequisites. Review the source to confirm the effect.
- 12 Oct 23:53 UTC
8 removed passages (about 50 words). The changed wording mentions prerequisites. Review the source to confirm the effect.
- 8 Oct 23:13 UTC · shown above
What changed
First observed 18 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.