Private Access sensor network requirements
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit e40ec8d · +5 −5 lines · also on GitHub
⋯ 1 unchanged line
22
title: Configure Microsoft Entra Private Access for Active Directory Domain Controllers
33
description: "Enforce Conditional Access and multifactor authentication for Kerberos authentication to Active Directory Domain Controllers through Microsoft Entra Private Access."
44
ms.topic: how-to
5
−ms.date: 03/16/2026
5
+ms.date: 03/25/2026
66
ms.subservice: entra-private-access
77
ms.reviewer: shkhalid
88
ai-usage: ai-assisted
⋯ 66 unchanged lines
7575
1. Go to **Global Secure Access** > **Connect** > **Traffic forwarding** > **Private Access Profile**.
7676
1. Enable the Private Access profile.
7777
78
−[](media/how-to-configure-domain-controllers/traffic-forwarding-profile.png#lightbox)
78
+[](media/how-to-configure-domain-controllers/traffic-forwarding-profile.png#lightbox)
7979
8080
### 5. Install the Global Secure Access client
8181
⋯ 9 unchanged lines
9191
1. During installation, sign in with a Microsoft Entra ID user when prompted.
9292
1. After installation, in the Microsoft Entra admin center, go to **Global Secure Access** > **Connect** > **Connectors and sensors** > **Private access sensors** and verify the sensor status is **Active**.
9393
94
−[](media/how-to-configure-domain-controllers/connectors-and-sensors.png#lightbox)
94
+[](media/how-to-configure-domain-controllers/connectors-and-sensors.png#lightbox)
9595
9696
> [!IMPORTANT]
9797
> To upgrade to the Private Access Sensor version 2.1.31, uninstall the previous sensor and then install the new sensor. You can in-place upgrade from the sensor versions 2.1.31 and later.
⋯ 134 unchanged lines
232232
233233
Example of how to configure SPN username exclusions and inclusions from the Microsoft Entra admin center:
234234
>
235
−[](media/how-to-configure-domain-controllers/exclusions-and-inclusions.png#lightbox)
235
+[](media/how-to-configure-domain-controllers/exclusions-and-inclusions.png#lightbox)
236236
237237
#### Break glass mode
238238
⋯ 19 unchanged lines
258258
### 10. Investigation and troubleshooting
259259
260260
- Use **Event Viewer** from **Application and Service Logs** > **Microsoft** > **Windows** > **Private Access Sensor** to review Private Access Sensor logs.
261
−[](media/how-to-configure-domain-controllers/event-viewer.png#lightbox)
261
+[](media/how-to-configure-domain-controllers/event-viewer.png#lightbox)
262262
- To collect Private Access Sensor logs, run `PrivateAccessSensorLogsCollector` from the sensor installation path and share the generated zip file with Microsoft support.
263263
- For Global Secure Access client logs:
264264
1. Right-click the Global Secure Access tray icon.
⋯ 9 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 03:01 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.