Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 415/439 docs · checked 23:56 UTC Customize Public modeDiscuss ChangeIntel on Discord

Private Access sensor release history

This page's changes and edits · All guidance changes

Microsoft's edit ·

Add Private Access Sensor release notes (#13524)

Microsoft's commit message in MicrosoftDocs/entra-docs · commit 7b57a4f · +53 −0 lines · also on GitHub

The file is new at this commit, or was moved here from another path: every line shows as added.

1 +---
2 +title: Microsoft Entra Private Access Sensor release notes
3 +description: This article tracks the released versions of the Microsoft Entra Private Access Sensor and the changes in each version.
4 +ms.topic: reference
5 +ms.date: 06/17/2026
6 +ms.subservice: entra-private-access
7 +ms.reviewer: shkhalid
8 +ai-usage: ai-assisted
9 +---
10 +
11 +# Microsoft Entra Private Access Sensor release notes
12 +
13 +This article lists the released versions of the Microsoft Entra Private Access Sensor and the changes in each version.
14 +
15 +## Download the latest version
16 +
17 +You can download the current version of the Private Access Sensor from the Microsoft Entra admin center.
18 +
19 +1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Global Secure Access Administrator](/azure/active-directory/roles/permissions-reference#global-secure-access-administrator).
20 +1. Browse to **Global Secure Access** > **Connect** > **Connectors and sensors** > **Private access sensors**.
21 +1. Select **Download private access sensor**.
22 +
23 +## Version 2.2.42
24 +
25 +Released for download on June 16, 2026.
26 +
27 +### Security enhancements
28 +
29 +- Hardens file and Event Tracing for Windows (ETW) channels against tampering by using channel permissions.
30 +- Adds fail-close enforcement for policy failures.
31 +
32 +### Kerberos observability
33 +
34 +- Adds ticket hash computation for AS-REP, TGS-REQ, and TGS-REP.
35 +- Adds differentiated ETW event IDs for all sensor events.
36 +
37 +### Configurable ETW trace file size cap
38 +
39 +- Caps ETL, trace, and log files at a configurable maximum size.
40 +- Persists the configured maximum size across upgrades.
41 +- Helps prevent disk exhaustion.
42 +
43 +### Diagnostics and telemetry
44 +
45 +- Improves telemetry reporting to the cloud.
46 +
47 +### Access enforcement
48 +
49 +- Adds privileged user access enforcement. This capability restricts cloud-based user access to privileged local users by UPN or SID and is in preview.
50 +
51 +### Bug fixes
52 +
53 +- Includes bug fixes and minor improvements.

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 08:37 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 23:56 UTC · 258 of 260 readable · 256 fully read · documentation 415/439 current