Microsoft Defender for Identity: New recommendations for Microsoft Secure Score

Microsoft Defender for Identity is introducing new recommendations for Microsoft Secure Score to improve security posture. These updates will automatically update scores to reflect the security posture better. The rollouts for Public Preview and General Availability will begin from mid-September 2024. The improvements will apply to Microsoft Defender XDR and Microsoft Defender for Identity. The new Identity recommendations are related to Active Directory and Group policy objects, which will be available automatically for customers who have installed a Defender for Identity sensor. In addition, Microsoft will continue to add suggested security improvement actions. To prepare for these updates, organizations should review the improvement actions listed in Microsoft Secure Score.

With the upcoming improvements, the Defender XDR portal will now include new recommendations such as non-default Primary Group ID accounts, Domain Controllers with computer account password unchanged for more than 45 days, and more. The existing recommendation of "Modify unsecure Kerberos delegations to prevent impersonation" will also be updated to include Kerberos Constrained Delegation with Protocol Transition to a privileged service. The post on M365 Admin provides more information on Security posture assessments.