{"id":13052,"date":"2025-09-30T09:02:29","date_gmt":"2025-09-30T00:02:29","guid":{"rendered":"https:\/\/m365jp.net\/?p=13052"},"modified":"2025-09-30T09:12:23","modified_gmt":"2025-09-30T00:12:23","slug":"mc1162274-new-post-deployment-configuration-for-unified-sensors-preview","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2025-09-30-mc1162274-new-post-deployment-configuration-for-unified-sensors-preview","title":{"rendered":"MC1162274 | New post-deployment configuration for unified sensors (preview)"},"content":{"rendered":"<div class=\"postie-post\">\n<div>\n<hr>\n<table id=\"section\">\n<tbody>\n<tr>\n<th width=\"95%\">MC1162274 | New post-deployment configuration for unified sensors (preview)<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<table id=\"data\">\n<tbody>\n<tr>\n<th>Classification<\/th>\n<td>stayInformed<\/td>\n<\/tr>\n<tr>\n<th>Last Updated<\/th>\n<td>09\/29\/2025 23:04:25<\/td>\n<\/tr>\n<tr>\n<th>Start Time<\/th>\n<td>09\/29\/2025 23:04:19<\/td>\n<\/tr>\n<tr>\n<th>End Time<\/th>\n<td>11\/28\/2025 08:00:00<\/td>\n<\/tr>\n<tr>\n<th>Message Content<\/th>\n<td>\n<\/p>\n<p><b>[Introduction]<\/b><\/p>\n<p>  We\u2019re introducing a new post-deployment configuration option for unified sensors (V3.x) in Microsoft Defender for Identity (preview). This update enhances security and enables advanced identity detections by allowing admins to apply the new  <i>Unified Sensor RPC Audit<\/i> tag to domain controllers onboarded with the unified sensor (v3.x). This tag activates Remote Procedure Call (RPC) monitoring using the Windows Filtering Platform (WFP), which is required for advanced identity detections.  <\/p>\n<p><b>[When this will happen:]<\/b><\/p>\n<p>  Preview (Worldwide): Rollout will begin in <b>late September 2025<\/b> and is expected to complete by  <b>mid-October 2025<\/b>.  <\/p>\n<\/p>\n<p>Preview (GCC, GCCH, and DoD): Rollout will begin in <b>late September 2025<\/b> and is expected to complete in  <b>late October 2025<\/b>.<\/p>\n<p><b>[How this affects your organization:]<\/b><\/p>\n<p>  <\/p>\n<ul>  <\/p>\n<li><b>Who is affected:&nbsp;<\/b>This configuration option applies only to devices running the unified sensor (v3.x).<\/li>\n<p>  <\/p>\n<li><b>What will happen:<\/b><br \/> \n<ul>  <\/p>\n<li>A new configuration option will be available in <i>Asset rule management<\/i>.<\/li>\n<p>  <\/p>\n<li>Admins can apply the Unified Sensor RPC Audit tag to onboarded domain controllers running the unified sensor (v3.x).<\/li>\n<li>Devices with this tag will have WFP-based RPC monitoring enabled.<\/li>\n<p>  <\/p>\n<li>Once applied, the configuration is enforced on existing and future devices that match the rule criteria.<\/li>\n<li>Tagged devices will appear in <i>Device inventory<\/i> for visibility and auditing.<\/li>\n<p>  <\/p>\n<li>This feature is <b>opt-in<\/b> and not enabled by default.<\/li>\n<p>  <\/ul>\n<p>  <\/li>\n<p>  <\/ul>\n<p><b>[What you can do to prepare:]<\/b><\/p>\n<p>  <\/p>\n<ul>  <\/p>\n<li>No action is required unless you want to enable the feature.<\/li>\n<p>  <\/p>\n<li>If needed, enable the new configuration option by creating an asset management rule to apply the tag.<\/li>\n<li>Communicate this change to your security and compliance teams.<\/li>\n<\/ul>\n<p>Learn more: <a href=\"https:\/\/learn.microsoft.com\/defender-for-identity\/deploy\/prerequisites-sensor-version-3\" target=\"_blank\">  Microsoft Defender for Identity sensor v3.x prerequisites (Preview)<\/a><\/p>\n<ul>  <a href=\"https:\/\/learn.microsoft.com\/en-us\/defender-for-identity\/unified-sensor-overview\"><br \/>  <\/a><\/ul>\n<p>  <b>[Compliance considerations:]<\/b>  <\/p>\n<p>No compliance considerations identified, review as appropriate for your organization.<\/p>\n<\/p>\n<\/td>\n<\/tr>\n<tr>\n<th>Machine Translation<\/th>\n<td>\n<\/p>\n<p><b>[\u306f\u3058\u3081\u306b]<\/b><\/p>\n<p>  Microsoft Defender for Identity (\u30d7\u30ec\u30d3\u30e5\u30fc) \u3067\u306f\u3001\u7d71\u5408\u30bb\u30f3\u30b5\u30fc (V3.x) \u306e\u65b0\u3057\u3044\u30c7\u30d7\u30ed\u30a4\u5f8c\u69cb\u6210\u30aa\u30d7\u30b7\u30e7\u30f3\u304c\u5c0e\u5165\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u66f4\u65b0\u30d7\u30ed\u30b0\u30e9\u30e0\u306b\u3088\u308a\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u304c\u5f37\u5316\u3055\u308c\u3001\u7ba1\u7406\u8005\u304c\u7d71\u5408\u30bb\u30f3\u30b5\u30fc (v3.x) \u3067\u30aa\u30f3\u30dc\u30fc\u30c9\u3055\u308c\u305f\u30c9\u30e1\u30a4\u30f3 \u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\u306b\u65b0\u3057\u3044  <i>\u7d71\u5408\u30bb\u30f3\u30b5\u30fc RPC \u76e3\u67fb<\/i> \u30bf\u30b0\u3092\u9069\u7528\u3067\u304d\u308b\u3088\u3046\u306b\u3059\u308b\u3053\u3068\u3067\u3001\u9ad8\u5ea6\u306a ID \u691c\u51fa\u304c\u53ef\u80fd\u306b\u306a\u308a\u307e\u3059\u3002\u3053\u306e\u30bf\u30b0\u306f\u3001\u9ad8\u5ea6\u306a ID \u691c\u51fa\u306b\u5fc5\u8981\u306a Windows \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0 \u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0 (WFP) \u3092\u4f7f\u7528\u3057\u305f\u30ea\u30e2\u30fc\u30c8 \u30d7\u30ed\u30b7\u30fc\u30b8\u30e3 \u30b3\u30fc\u30eb (RPC) \u76e3\u8996\u3092\u30a2\u30af\u30c6\u30a3\u30d6\u5316\u3057\u307e\u3059\u3002  <\/p>\n<p><b>[\u3053\u308c\u304c\u3044\u3064\u8d77\u3053\u308b\u304b:]<\/b><\/p>\n<p>  \u30d7\u30ec\u30d3\u30e5\u30fc (\u5168\u4e16\u754c): \u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u306f <b>2025 \u5e74 9 \u6708\u4e0b\u65ec<\/b> \u306b\u958b\u59cb\u3055\u308c\u3001 <b>2025 \u5e74 10 \u6708\u4e2d\u65ec<\/b>\u307e\u3067\u306b\u5b8c\u4e86\u3059\u308b\u4e88\u5b9a\u3067\u3059\u3002  <\/p>\n<\/p>\n<p>\u30d7\u30ec\u30d3\u30e5\u30fc (GCC\u3001GCH\u3001DOD): \u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u306f <b>2025 \u5e74 9 \u6708\u4e0b\u65ec<\/b> \u306b\u958b\u59cb\u3055\u308c\u3001 <b>2025 \u5e74 10 \u6708\u4e0b\u65ec<\/b>\u306b\u5b8c\u4e86\u3059\u308b\u4e88\u5b9a\u3067\u3059\u3002<\/p>\n<p><b>[\u3053\u308c\u304c\u3042\u306a\u305f\u306e\u7d44\u7e54\u306b\u4e0e\u3048\u308b\u5f71\u97ff:]<\/b><\/p>\n<p>  <\/p>\n<ul>  <\/p>\n<li><b>\u5f71\u97ff\u3092\u53d7\u3051\u308b\u4eba:&nbsp;<\/b>\u3053\u306e\u69cb\u6210\u30aa\u30d7\u30b7\u30e7\u30f3\u306f\u3001\u7d71\u5408\u30bb\u30f3\u30b5\u30fc(v3.x)\u3092\u5b9f\u884c\u3057\u3066\u3044\u308b\u30c7\u30d0\u30a4\u30b9\u306b\u306e\u307f\u9069\u7528\u3055\u308c\u307e\u3059\u3002<\/li>\n<p>  <\/p>\n<li><b>\u4f55\u304c\u8d77\u3053\u308b\u304b:<\/b><br \/> \n<ul>  <\/p>\n<li>\u65b0\u3057\u3044\u69cb\u6210\u30aa\u30d7\u30b7\u30e7\u30f3\u304c <i>\u8cc7\u7523\u30eb\u30fc\u30eb\u7ba1\u7406 \u3067<\/i>\u4f7f\u7528\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002<\/li>\n<p>  <\/p>\n<li>\u7ba1\u7406\u8005\u306f\u3001\u7d71\u5408\u30bb\u30f3\u30b5\u30fc (v3.x) \u3092\u5b9f\u884c\u3057\u3066\u3044\u308b\u30aa\u30f3\u30dc\u30fc\u30c9\u3055\u308c\u305f\u30c9\u30e1\u30a4\u30f3 \u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\u306b\u7d71\u5408\u30bb\u30f3\u30b5\u30fc RPC \u76e3\u67fb\u30bf\u30b0\u3092\u9069\u7528\u3067\u304d\u307e\u3059\u3002<\/li>\n<li>\u3053\u306e\u30bf\u30b0\u3092\u6301\u3064\u30c7\u30d0\u30a4\u30b9\u3067\u306f\u3001WFP \u30d9\u30fc\u30b9\u306e RPC \u76e3\u8996\u304c\u6709\u52b9\u306b\u306a\u308a\u307e\u3059\u3002<\/li>\n<p>  <\/p>\n<li>\u8a2d\u5b9a\u304c\u9069\u7528\u3055\u308c\u308b\u3068\u3001\u30eb\u30fc\u30eb\u57fa\u6e96\u306b\u4e00\u81f4\u3059\u308b\u65e2\u5b58\u304a\u3088\u3073\u5c06\u6765\u306e\u30c7\u30d0\u30a4\u30b9\u306b\u9069\u7528\u3055\u308c\u307e\u3059\u3002<\/li>\n<li>\u30bf\u30b0\u4ed8\u3051\u3055\u308c\u305f\u30c7\u30d0\u30a4\u30b9\u306f\u3001\u53ef\u8996\u6027\u3068\u76e3\u67fb\u306e\u305f\u3081\u306b <i>\u30c7\u30d0\u30a4\u30b9 \u30a4\u30f3\u30d9\u30f3\u30c8\u30ea<\/i> \u306b\u8868\u793a\u3055\u308c\u307e\u3059\u3002<\/li>\n<p>  <\/p>\n<li>\u3053\u306e\u6a5f\u80fd\u306f <b>\u30aa\u30d7\u30c8\u30a4\u30f3<\/b> \u3067\u3042\u308a\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u306f\u6709\u52b9\u306b\u306a\u3063\u3066\u3044\u307e\u305b\u3093\u3002<\/li>\n<p>  <\/ul>\n<p>  <\/li>\n<p>  <\/ul>\n<p><b>[\u6e96\u5099\u3059\u308b\u305f\u3081\u306b\u3067\u304d\u308b\u3053\u3068:]<\/b><\/p>\n<p>  <\/p>\n<ul>  <\/p>\n<li>\u6a5f\u80fd\u3092\u6709\u52b9\u306b\u3057\u306a\u3044\u9650\u308a\u3001\u30a2\u30af\u30b7\u30e7\u30f3\u306f\u5fc5\u8981\u3042\u308a\u307e\u305b\u3093\u3002<\/li>\n<p>  <\/p>\n<li>\u5fc5\u8981\u306b\u5fdc\u3058\u3066\u3001\u30bf\u30b0\u3092\u9069\u7528\u3059\u308b\u8cc7\u7523\u7ba1\u7406\u30eb\u30fc\u30eb\u3092\u4f5c\u6210\u3057\u3066\u3001\u65b0\u3057\u3044\u69cb\u6210\u30aa\u30d7\u30b7\u30e7\u30f3\u3092\u6709\u52b9\u306b\u3057\u307e\u3059\u3002<\/li>\n<li>\u3053\u306e\u5909\u66f4\u3092\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u304a\u3088\u3073\u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9 \u30c1\u30fc\u30e0\u306b\u4f1d\u3048\u307e\u3059\u3002<\/li>\n<\/ul>\n<p>\u8a73\u7d30\u60c5\u5831: <a href=\"https:\/\/learn.microsoft.com\/defender-for-identity\/deploy\/prerequisites-sensor-version-3\" target=\"_blank\">  Microsoft Defender for Identity \u30bb\u30f3\u30b5\u30fc v3.x \u306e\u524d\u63d0\u6761\u4ef6 (\u30d7\u30ec\u30d3\u30e5\u30fc)<\/a><\/p>\n<ul>  <a href=\"https:\/\/learn.microsoft.com\/en-us\/defender-for-identity\/unified-sensor-overview\"><br \/>  <\/a><\/ul>\n<p>  <b>[\u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306b\u95a2\u3059\u308b\u8003\u616e\u4e8b\u9805:]<\/b>  <\/p>\n<p>\u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306b\u95a2\u3059\u308b\u8003\u616e\u4e8b\u9805\u304c\u7279\u5b9a\u3055\u308c\u3066\u3044\u306a\u3044\u5834\u5408\u306f\u3001\u7d44\u7e54\u306b\u5fdc\u3058\u3066\u78ba\u8a8d\u3057\u307e\u3059\u3002<\/p>\n<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>MC1162274 | New post-deployment configuration for unified sensors (preview) Classification stayInformed Last U [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-13052","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/13052","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=13052"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/13052\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=13052"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=13052"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=13052"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}