Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Auditing gMSA usage — what methods exist beyond Event ID 4662?

While investigating a stale gMSA finding (154 days, Active = False), I realised our environment had no gMSA auditing in place. I’ve now configured: DS Access audit policy (Success) via GPO on Domain Controllers SACL on Managed Service Accounts…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow

When a Computer slows down?

Need to know what questions are important to solve a problem of a slow down computer with windows 10

Windows for business | Windows Client for IT Pros | Networking | Network connectivity and file sharing

Windows for business | Windows Client for IT Pros | Networking | Network connectivity and file sharing

4,805 questions

Sign in to follow

Windows for business | Windows Client for IT Pros | Devices and deployment | Configure application groups

Windows for business | Windows Client for IT Pros | Devices and deployment | Configure application groups

3,098 questions

Sign in to follow

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow

Windows for business | Windows Client for IT Pros | User experience | Other

Windows for business | Windows Client for IT Pros | User experience | Other

29,170 questions

Sign in to follow

Verify Identity of Microsoft rep.

I received a Firewall Alert and called the tel. no. listed. I spoke to a guy who claimed to be Jason Norman, Micro ID MCT1026. Please verify that Jason is a legitimate rep for Microsoft. Thanks, Gregory Gillis

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow

how to fix wire tapping pop up

Over the last few days I have been repeatedly getting a pop while on the internet that that I have a wire tapping which tries to me direct to a suspicious web site to supposedly fix it. How do I correct this issue?

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow

safe usage after being hacked

computer was hacked. MacAfee and Microsoft assisted in returning control from being locked. what steps, actions need to be taken to be certain that my computer is now safe from threats?

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow

Identities from old On-Prem Active Directory domain still visible in Defender Portal

Good day. We previously had an On-Prem Active Directory domain that has since been shutdown/decommissioned back in March 2026. However, the Defender portal still show these accounts and domain. It's possible proper clean-up / decommission to remove from…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow

Setting up Directory Service Accounts and Managed Action Accounts with a gMSA

In the process of setting up Directory Service Accounts and Managed Action Accounts using a group Managed Service Account, it iss observed that the naming convention for a DSA requires the name string to end with a $. However, there is no information…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow

Defender for Identity Sensor Unable to Start on Windows Server 2016

We are experiencing an issue with Microsoft Defender for Identity on a Windows Server 2016 domain controller. As part of the deployment, we installed the Microsoft Defender for Identity PowerShell module, configured the required Group Managed Service…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow

Microsoft account was hacked — can the account be suspended or deleted?

Hello, My personal Microsoft account was compromised on October 11, 2026. The attacker changed my password and multiple security details, and removed or replaced my original Gmail address. When I try to sign in or recover the account using my original…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow

How to get back your account?

Hello, my name is Lida and I'm having issues with hackers on my pc. They managed to changed both email and password on my pc. I do need help with this issue, thank you.

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow

Microsoft Sentinel workspace not appearing in Defender Analytics

I have a Microsoft Sentinel workspace that shows as Primary and Connected under Microsoft Defender → Settings → Microsoft Sentinel → SIEM Workspaces. However, under Microsoft Defender → Microsoft Sentinel → Analytics → Select a Workspace, the selector…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow

help me fix windows security stuck

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow

My Microsoft account was hacked and the attacker changed my security information — I need help recovering it

Hello Microsoft Support / Microsoft Community, My Microsoft account ******@gmail.com was compromised, and I believe someone gained unauthorized access to it and changed the account's security information. I am the original owner of ******@gmail.com, but…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow

Hi Team, We would like to raise a support case for clarification and guidance on the following Microsoft Defender XDR alerts: Alert ID 2845536 – Unfamiliar sign-in properties involving one user Alert ID 2825455 – Possibly compromised service principal acc

Hi Team, We would like to raise a support case for clarification and guidance on the following Microsoft Defender XDR alerts: Alert ID 2845536 – Unfamiliar sign-in properties involving one user Alert ID 2825455 – Possibly compromised service principal…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow

How can I clear the "CONTAINED" status of a user after remediation?

One of our users fell for a ClickFix attack and was automatically set to "CONTAINED" by Defender. We remediated the incident by wiping the client notebook on which the attack happened, verifying that no other systems were affected, and…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow

Fraudulent takeover

I think my computer may have been taken over by a fraudulent agent. She gave her name as Jenna Hall ID 412790 Does she work for Microsoft?

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow

Domain controller showing "Not ready for migration" in Defender for Identity

I want to get the MDI sensor upgraded to v3 on our domain controllers. When I go into Settings > Sensors, two of our DCs are listed as "Ready for migration", but the third says "Not ready for migration". As far as I can tell, this…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow

Unable to complete Azure MFA after changing phone - cannot create or upgrade Azure subscription

Hello, I need help with an issue involving Azure and Microsoft Entra. I have a personal Microsoft account and can successfully sign in to Outlook.com, account.microsoft.com, and the Azure Portal. The problem arises only when I try to create a new Azure…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow

Stolen account

i swear Microsoft does nothing about stolen accounts (it is a separate email; my older brother's) T-T, my younger brother joined a discord dm because he wanted to play with randoms on bedwars and the guy gave him an "email confirmation" in…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow

Endpoint Onbroading question

Hi, I have a question about onboarding powershell command. powershell.exe -NoExit -ExecutionPolicy Bypass -WindowStyle Hidden $ErrorActionPreference = 'silentlycontinue';(New-Object System.Net.WebClient).DownloadFile('http://127.0.0.1/1.exe',…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud

A cloud-native solution that protects workloads across hybrid and multi-cloud environments with threat detection and security recommendations

1,804 questions

Sign in to follow

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

380 questions

Sign in to follow