Defender For Identity

[MattGambles]

I'm looking to implement defender for identity. I dont want it to start automatically disabling accounts what can you do to put this in audit mode? 

Thanks

Matt

[#2]

It would be new if Defender for Identity automatically disabled accounts. Action accounts are new, but they also do not carry out any automatic actions. Can you describe the behavior in more detail?

[#3]

@seth Hi, its not something that's happening as we haven't deployed yet. Its something we don't want to happen. So nothing is automatically done regarding user accounts, is this correct? Just want to confirm that when we deploy that no actions will be done automatically done and everything has to have a user action.