Microsoft Advanced Auditing for defender for identity

[Guest Joe Stef]

We are attempting to setup Defender Identity on our domain controllers. We are getting errors claiming that Directory Services Advanced Auditing is not enabled.Please enable the Directory Services Advanced Auditing events according to the guidance as described in Configure audit policies for Windows event logs - Microsoft Defender for Identity We ran the readiness report and found that Advanced Auditing is set to false despite changes we made to group policy to turn it on We followed the article below by creating a brand new policy and binded it to the domain controllers: https://learn.microsoft.com/en-us/defender-for-identity/deploy/con

 

Continue reading...