Sensor v3.x supports all identity roles on domain controllers
Analysis / inference: Microsoft Defender for Identity sensor version 3.x introduces support for domain controllers handling additional identity roles such as Entra Connect, AD FS, and AD CS.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Defender for Identity - What's new · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
Sensor version 3.x has expanded support to accommodate domain controllers hosting Microsoft Entra Connect, Active Directory Federation Services (AD FS), and Active Directory Certificate Services (AD CS).
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisSupport for running Defender for Identity sensors on domain controllers housing multiple identity roles eliminates previous architectural restrictions.
Simplifies domain controller sensor architecture by removing role coexistence restrictions, enabling unified monitoring on multi-role servers.
Section 03 · Recommended actions
- Review the Defender for Identity sensor v3.x prerequisites documentation
- Plan updates for sensors on domain controllers hosting Entra Connect, AD FS, or AD CS
- Check domain controllers running Microsoft Entra Connect, AD FS, or AD CS for sensor version compatibility
- Review Defender for Identity sensor v3.x deployment prerequisites