Forum Discussion

StuartH .'s avatar
StuartH .
Brass Contributor
Oct 31, 2019

ATP sensors...download report shows far more domain controllers than expected

On the sensors config page, it shows "Azure ATP sensors on xxx of yyy domain controllers". What we are seeing, is that yyy is definitely more domain controllers shown than in our forest.  How is ATP ...
EliOfek's avatar
EliOfek
Icon for Microsoft rankMicrosoft

StuartH .  giving access after the fact will not always solve the issue.

We are still perfecting the new solution, and although we do have progress I don't  have a release date yet.

I hope it will be few weeks before we can deploy it globally.

StuartH .'s avatar
StuartH .
Brass Contributor
Nov 20, 2019

EliOfek Well, I wondered how, after the fact, that would work....as I assumed that the service account would compare what was deleted to what was existing...but after the tombstone lifetime, how would that ever know the retired DC would exist?

No way to clean up those retired DCs some other way ?

  • EliOfek's avatar
    EliOfek
    Icon for Microsoft rankMicrosoft
    Nov 20, 2019

    StuartH .  Currently no, but once the new feature is available it will detect "unreachable DCs" and mark them as missing, thus will also remove from the report.

Resources