Forum Discussion
Secure Score "this account is sensitive and cannot be delegated"
Hi In Microsoft Secure Score when selecting the recommended action Ensure that all privileged accounts have the configuration flag "this account is sensitive and cannot be delegated" and in the Expo...
LiorShapira
Microsoft
Microsoftstarman2heven We've implemented today an exclusion for ADFS servers, Exchange servers, Certificate servers and AzureADKerberos object. Can you please check the recommendation again? thanks!
In our environment we don't have ADFS or Exchange, only 2 DCs one of which is also a CA (I know it's not recommended, but it's working fine)
Last week, we went from completed status with the DCs still showing as exposed, to a completed status with nothing showing as exposed, but as of this morning it's back to not completed ('to address') and the DCs are showing as exposed again.