Microsoft Defender for Identity: Native "response" actions

New Contributor

Hi all,


I've found the following Feature on the Roadmap which is acutally GA:

Microsoft Defender for Identity: Native "response" actions


Unfortunately I cannot find any Documentation etc. how to configure this / get use of this Feature. I would really like to have the Option to automatically disable a AD User when AATP discover some really weird things on the Account.


Hope you can help me out.





4 Replies
best response confirmed by Magenta365 (New Contributor)



The feature is not GA just yet. It will be in a couple of weeks.

We'll update the roadmap to reflect that. @Ricky Simpson 


For now, you can go ahead and configure the gMSA with the proper permissions to take those actions, as described in Manage action accounts | Microsoft Docs

Thanks Martin. I'll look to update this item ASAP.
Thanks for the speedy Response !