Expanded coverage in ITDR deployment health widget
Analysis / inference: The ITDR deployment health widget now includes visibility into ADFS, ADCS, and Microsoft Entra Connect server deployments alongside domain controllers.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Defender for Identity - What's new archive · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
Microsoft Defender for Identity updated the Identity Threat Detection and Response deployment health widget to incorporate coverage tracking for ADFS, ADCS, and Microsoft Entra Connect servers in addition to traditional domain controllers.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisSOC and identity teams gain centralized visibility into sensor deployment health across critical auxiliary identity infrastructure like ADFS, ADCS, and Microsoft Entra Connect rather than domain controllers alone.
Improves administrative tracking capabilities for identity asset posture, enabling faster identification of unmonitored ADFS, ADCS, or Entra Connect servers.
Section 03 · Recommended actions
- Review the Microsoft Defender portal to check the updated ITDR deployment health widget.
- Ensure MDI sensors are installed and healthy on all identified ADFS, ADCS, and Microsoft Entra Connect servers.
- Verify the ITDR deployment health widget in Microsoft Defender for Identity for status updates on ADFS, ADCS, and Microsoft Entra Connect servers.
- Check sensor coverage across all supported identity infrastructure to identify missing or unmonitored servers.