Skip to content

Commit 1bd53d1

Browse files
committed
Added material to note.
1 parent 8eaf074 commit 1bd53d1

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

defender-endpoint/respond-machine-alerts.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -364,6 +364,8 @@ When an identity in your network might be compromised, you must prevent that ide
364364
365365
> [!IMPORTANT]
366366
> As part of the active protection provided by Microsoft Defender for Endpoint, a distributed mechanism can apply LSA Policy to prevent compromised users from accessing machines in your organization. Currently, when this policy is applied on domain controllers, it may cause Group Policy synchronization activity across domain controllers.
367+
>
368+
> We are gradually rolling out a new solution by integrating with new OS APIs. This deployment will be phased and thoroughly tested to ensure stability and security. During this rollout, LSA Policy enforcement on your servers will be temporarily removed to prevent potential GPO sync. This change will remain in effect until the rollout is complete.
367369
368370
### How to contain a user
369371

0 commit comments

Comments
 (0)