Protected Users and protected accounts

Timelines and exceptions · All guidance changes

Active Directory · Official Microsoft guidance

No content change seen yet. Watched since 8 Oct 23:45 UTC, last read today 00:28 UTC, next check 21 Oct 00:28 UTC. Microsoft's own edits are listed below.

Read the Microsoft source · Link to this observation · My radar

Timeline

From the capture of 8 Oct 23:45 UTC · an earlier observation

Legacy capture: table structure or oversized sections are unavailable for extraction

12 recorded changes

Microsoft's revision log on this page · 39 entries

Dates from the page's own change log or history section. They describe earlier edits, not upcoming policy.

Guidance about how to configure protected accountsRequirement1 condition
Guidance about how to configure protected accountsRequirement1 condition
Guidance about how to configure protected accountsScope
Protected UsersScope1 condition
Protected UsersRequirement
Protected UsersRequirement
Protected UsersRequirement1 condition
Protected UsersRecommendation
PowerShellAdd-ADGroupMember
Protected UsersRecommendation1 condition
Protected UsersRequirementException2 conditions
Protected UsersException1 condition
Protected UsersRequirement
Requirements for using protected accountsRequirementException1 condition
Requirements for using protected accountsRequirement
Troubleshoot delegation issuesRequirement3 conditions
Provide DC-side protections for services and computersRequirement
Provide DC-side protections for services and computersException1 condition
Provide DC-side protections for services and computersException1 condition
Provide DC-side protections for services and computersRecommendation
Provide DC-side protections for services and computersRequirement
OverviewRequirement
OverviewRequirement
Restrict a user account to specific devices and hostsRecommendation
Configure domain controller supportRequirement
Create a user account audit for authentication policy with ADACRequirement
Create a user account audit for authentication policy with ADACException2 conditions
Create a user account audit for authentication policy with ADACRequirement
Create a user account audit for authentication policy with ADACException1 condition
Create a user account audit for authentication policy with ADACException1 condition
Create a user account audit for authentication policy with ADACRecommendation
Create a user account audit for authentication policy with ADACException1 condition
Create a user account audit for authentication policy with ADACException1 condition
Configure Dynamic Access Control support on devices and hostsException1 condition
AllowedToAuthenticateFromAllowedToAuthenticateTo
Use the Authentication Policy Failures - Domain Controller administrative logScope
Authentication policy silosException1 condition
Authentication policy silosRequirement
Authentication policy silosRequirement1 condition
Authentication policy silosRequirementException
Authentication policy silosException2 conditions

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

9 Jul 2025
Requirement added Requirements for using protected accounts Microsoft's source, commit 2b47373
9 Jul 2025
No longer on the page Requirements for using protected accounts Microsoft's source, commit 2b47373
9 Jul 2025
Requirement added Configure domain controller support Microsoft's source, commit 2b47373
9 Jul 2025
No longer on the page Configure domain controller support Microsoft's source, commit 2b47373
9 Jul 2025
Requirement added Overview Microsoft's source, commit 2b47373
9 Jul 2025
No longer on the page Overview Microsoft's source, commit 2b47373
9 Jul 2025
Requirement added Protected Users Microsoft's source, commit 2b47373
9 Jul 2025
No longer on the page Protected Users Microsoft's source, commit 2b47373
9 Jul 2025
No longer on the page Requirements for using protected accounts Microsoft's source, commit 2b47373
9 Jul 2025
Requirement added Requirements for using protected accounts Microsoft's source, commit 2b47373
9 Jul 2025
Scope added Use the Authentication Policy Failures - Domain Controller administrative log Microsoft's source, commit 2b47373
9 Jul 2025
No longer on the page Use the Authentication Policy Failures - Domain Controller administrative log Microsoft's source, commit 2b47373

Observed history and review priority

Captured 8 Oct 23:45 UTC; extracted 16 Oct 16:11 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c/legacy.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 12

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

13 Oct 00:39 UTC · 39 candidates
8 Oct 23:45 UTC · 42 candidates
9 Jul 2025 17:07 UTC · 39 candidates
6 Jan 2025 16:31 UTC · 39 candidates
3 Nov 2024 13:31 UTC · 39 candidates
22 Oct 2024 16:23 UTC · 39 candidates
8 Aug 2023 11:18 UTC · 39 candidates
17 Jul 2023 09:36 UTC · 39 candidates
27 Jul 2021 15:51 UTC · 39 candidates
17 Dec 2020 06:01 UTC · 39 candidates
7 Aug 2020 18:15 UTC · 39 candidates
30 Jul 2020 17:09 UTC · 39 candidates

Microsoft's edits

History on GitHub

Commits to the page's source in MicrosoftDocs/windowsserverdocs, with Microsoft's own messages. Commit dates can be hours or days before Learn publishes the change. ChangeIntel keeps a copy of each diff, so an edit stays readable here if GitHub stops serving it. Read 19 Oct 23:56 UTC.

22 Sep 2025 14:06 UTC Remove manager and ms.assetid metadata fields from identity folder markdown files Metadata onlyServed on LearnView diff
9 Jul 2025 17:07 UTC Added warning note View diff
6 Jan 2025 16:31 UTC Removing special character View diff
3 Nov 2024 13:31 UTC Spelling Fixes View diff
22 Oct 2024 16:23 UTC Removing local applies to for AD DS View diff
8 Aug 2023 11:18 UTC Updated wording and added note alert box View diff
17 Jul 2023 09:36 UTC Update How-to-Configure-Protected-Accounts.md View diff
27 Jul 2021 15:51 UTC Added Applies to for Windows Server 2022 and 2019 (where missing) View diff
17 Dec 2020 06:01 UTC Fixing duplicate alt text View diff
7 Aug 2020 18:15 UTC Links: Windows Server - Remaining - 0 View diff
30 Jul 2020 17:09 UTC fixing issues View diff

9 metadata-only edits · author, dates or topic labels, no article text

12 May 2025 19:31 UTC [BULK METADATA UPDATE] Updates author/ms.author. Metadata onlyView diff
1 May 2025 12:53 UTC [Scoped] Bulk update author metadata Metadata onlyView diff
26 Apr 2025 00:53 UTC Bulk update ms.topic (#6814) Metadata onlyView diff
9 May 2024 02:50 UTC replaced daveba as ms.author Metadata onlyView diff
3 Dec 2020 21:54 UTC bulk updates to add missing descriptions Metadata onlyView diff
29 Oct 2020 17:43 UTC changing invalid author Metadata onlyView diff
25 Aug 2020 21:32 UTC [ADDS] Author transition Metadata onlyView diff
7 Aug 2020 16:23 UTC removing ms.tech Metadata onlyView diff
7 Aug 2020 00:41 UTC removing ms.prod Metadata onlyView diff

No related evidence found in this installation's recent collection. This does not establish that no announcement exists.

Retained observations

13 Oct 00:39 UTC
9 removed passages (about 70 words). The changed wording mentions dates and deadlines, prerequisites. Review the source to confirm the effect.
8 Oct 23:45 UTC · shown above

What changed

First observed 18 Oct 2026

No field changes in the recorded history.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.