Forum Discussion
Azure AD Connect - Malicious replication of directory services
Hi
Just implemented ATA and the first alert I got was from the MSOL account Azure AD Connect creates from the server it is running on. Is this to be expected?
Thanks
T
- Hello, please exclude the AAD connect server from the detection. Seyfallah Tagrerout Microsoft MVP
- Nicholas DiCola (SECURITY JEDI)
Microsoft
are you expecting Azure AD connect to run on that box? if yes, then exlude the machine from that detection.
Yes Azure AD Connect is on that machine.
- Nicholas DiCola (SECURITY JEDI)
Then exclude it.
- I too had this same issue and was curious what to do. Thanks for the post
