Forum Discussion

starman2heven's avatar
starman2heven
Brass Contributor
Oct 25, 2024

Secure Score "this account is sensitive and cannot be delegated"

Hi In Microsoft Secure Score when selecting the recommended action Ensure that all privileged accounts have the configuration flag "this account is sensitive and cannot be delegated" and in the Expo...
LiorShapira's avatar
LiorShapira
Icon for Microsoft rankMicrosoft
Nov 14, 2024

starman2heven Could you please check again? we've updated the recommendation title to be "Ensure privileged accounts are not delegated". The deployment was ended yesterday (except of United States Environment which will take a couple of days). At the moment, we excluded DC's only and ADFS, Exchange servers and Certificate servers will be excluded by Nov 20'. 

starman2heven's avatar
starman2heven
Brass Contributor
Jan 22, 2025

LiorShapiraIt would be nice to have a list of server roles that are excluded from this in the documentation. My DHCP server is still being listed and I have no idea why.