Sensor v3.x support for domain controllers with Microsoft Entra Connect identity roles
Analysis / inference: Microsoft Defender for Identity sensor v3.x now supports domain controllers running Microsoft Entra Connect with new detections and ISPM recommendations.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Defender for Identity - What's new · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
Defender for Identity sensor v3.x has been updated to support domain controllers running Microsoft Entra Connect, providing security detections and identity security posture management recommendations.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisEnables SOC analysts to monitor identity posture and security detections on domain controllers running Microsoft Entra Connect when using Defender for Identity sensor v3.x.
Expands monitoring and detection coverage for identity infrastructure by supporting Microsoft Entra Connect roles on domain controllers.
Section 03 · Recommended actions
- Ensure domain controllers running Microsoft Entra Connect and sensor v3.x are running Windows Server 2019 or later with at least the March 2026 Cumulative Update.
- Review Defender for Identity deployment overview and sensor prerequisites documentation.
- Verify the operating system version on domain controllers running Microsoft Entra Connect is Windows Server 2019 or later.
- Confirm that the required cumulative update (at least March 2026) is applied to the affected domain controllers.