Jan 27 2022 08:27 AM
Hi all,
I've found the following Feature on the Roadmap which is acutally GA:
Microsoft Defender for Identity: Native "response" actions |
https://www.microsoft.com/de-de/microsoft-365/roadmap?filters=&searchterms=82077
Unfortunately I cannot find any Documentation etc. how to configure this / get use of this Feature. I would really like to have the Option to automatically disable a AD User when AATP discover some really weird things on the Account.
Hope you can help me out.
Regards,
Pi
Jan 27 2022 09:24 AM
Solution
The feature is not GA just yet. It will be in a couple of weeks.
We'll update the roadmap to reflect that. @Ricky Simpson
For now, you can go ahead and configure the gMSA with the proper permissions to take those actions, as described in Manage action accounts | Microsoft Docs
Jan 27 2022 10:04 AM
Jan 28 2022 12:44 AM
Jan 31 2022 12:58 AM
@Ricky Simpson @Martin_Schvartzman @Magenta365
Looks like that's coming thru now?
https://security.microsoft.com/settings/identities?tabid=manageAccounts
Jan 27 2022 09:24 AM
Solution
The feature is not GA just yet. It will be in a couple of weeks.
We'll update the roadmap to reflect that. @Ricky Simpson
For now, you can go ahead and configure the gMSA with the proper permissions to take those actions, as described in Manage action accounts | Microsoft Docs