{"id":13545,"date":"2025-10-31T01:01:13","date_gmt":"2025-10-30T16:01:13","guid":{"rendered":"https:\/\/m365jp.net\/?p=13545"},"modified":"2025-10-31T01:06:12","modified_gmt":"2025-10-30T16:06:12","slug":"mc1181656-microsoft-secure-score-new-recommendations-for-microsoft-defender-for-endpoint","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2025-10-31-mc1181656-microsoft-secure-score-new-recommendations-for-microsoft-defender-for-endpoint","title":{"rendered":"MC1181656 | Microsoft Secure Score: New recommendations for Microsoft Defender for Endpoint"},"content":{"rendered":"
\n
\n
\n\n\n\n
MC1181656 | Microsoft Secure Score: New recommendations for Microsoft Defender for Endpoint<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n\n\n\n\n\n\n\n\n
Classification<\/th>\nstayInformed<\/td>\n<\/tr>\n
Last Updated<\/th>\n10\/30\/2025 15:43:44<\/td>\n<\/tr>\n
Start Time<\/th>\n10\/30\/2025 15:43:36<\/td>\n<\/tr>\n
End Time<\/th>\n12\/19\/2025 08:00:00<\/td>\n<\/tr>\n
Message Content<\/th>\n\n

[Introduction]<\/b><\/p>\n

We\u2019re introducing new Microsoft Secure Score recommendations<\/b> for Microsoft Defender for Endpoint (MDE) to help organizations strengthen their security posture. These recommendations are designed to proactively block common attack techniques and improve endpoint protection. <\/p>\n

[When this will happen:]<\/b><\/p>\n

Public Preview: Rollout begins in early November 2025 and is expected to complete by mid-November 2025.<\/p>\n

[How this affects your organization:]<\/b><\/p>\n

Who is affected: <\/b>Admins managing Microsoft Defender for Endpoint and Microsoft Secure Score.<\/p>\n

What\u2019s changing:<\/b><\/p>\n

Lightweight Directory Access Protocol (LDAP)<\/b> is a protocol used to access and manage directory information, commonly for authentication and authorization in enterprise environments.<\/p>\n

Customers in Public Preview will see the following new recommendations in Microsoft Secure Score:<\/p>\n

    \n
  1. Require LDAP client signing to prevent tampering and protect directory authentication <\/li>\n
  2. Encrypt LDAP client traffic to protect sensitive data in transi <\/li>\n
  3. Enforce LDAP channel binding to protect authentication sessions from interception <\/li>\n
  4. Require LDAP server signing to ensure integrity of directory traffic<\/li>\n<\/ol>\n

    Secure Score will be updated based on the implementation of these recommendations.<\/p>\n

    [What you can do to prepare:]<\/b><\/p>\n

Machine Translation<\/th>\n\n

[\u306f\u3058\u3081\u306b]<\/b><\/p>\n

Microsoft Defender for Endpoint (MDE) \u306e\u65b0\u3057\u3044 Microsoft Secure Score \u306e\u63a8\u5968\u4e8b\u9805<\/b> \u3092\u5c0e\u5165\u3057\u3066\u3001\u7d44\u7e54\u304c\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f53\u5236\u3092\u5f37\u5316\u3067\u304d\u308b\u3088\u3046\u306b\u3057\u3066\u3044\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u63a8\u5968\u4e8b\u9805\u306f\u3001\u4e00\u822c\u7684\u306a\u653b\u6483\u624b\u6cd5\u3092\u30d7\u30ed\u30a2\u30af\u30c6\u30a3\u30d6\u306b\u30d6\u30ed\u30c3\u30af\u3057\u3001\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u4fdd\u8b77\u3092\u5411\u4e0a\u3055\u305b\u308b\u3088\u3046\u306b\u8a2d\u8a08\u3055\u308c\u3066\u3044\u307e\u3059\u3002 <\/p>\n

[\u3053\u308c\u304c\u3044\u3064\u8d77\u3053\u308b\u304b:]<\/b><\/p>\n

\u30d1\u30d6\u30ea\u30c3\u30af \u30d7\u30ec\u30d3\u30e5\u30fc: \u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u306f 2025 \u5e74 11 \u6708\u521d\u65ec\u306b\u958b\u59cb\u3055\u308c\u30012025 \u5e74 11 \u6708\u4e2d\u65ec\u307e\u3067\u306b\u5b8c\u4e86\u3059\u308b\u4e88\u5b9a\u3067\u3059\u3002<\/p>\n

[\u3053\u308c\u304c\u3042\u306a\u305f\u306e\u7d44\u7e54\u306b\u4e0e\u3048\u308b\u5f71\u97ff:]<\/b><\/p>\n

\u5f71\u97ff\u3092\u53d7\u3051\u308b\u4eba: <\/b>Microsoft Defender for Endpoint \u3068 Microsoft Secure Score \u3092\u7ba1\u7406\u3059\u308b\u7ba1\u7406\u8005\u3002<\/p>\n

\u5909\u66f4\u70b9:<\/b><\/p>\n

Lightweight Directory Access Protocol (LDAP)<\/b> \u306f\u3001\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u60c5\u5831\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3068\u7ba1\u7406\u306b\u4f7f\u7528\u3055\u308c\u308b\u30d7\u30ed\u30c8\u30b3\u30eb\u3067\u3001\u901a\u5e38\u3001\u30a8\u30f3\u30bf\u30fc\u30d7\u30e9\u30a4\u30ba\u74b0\u5883\u3067\u306e\u8a8d\u8a3c\u3068\u627f\u8a8d\u306b\u4f7f\u7528\u3055\u308c\u307e\u3059\u3002<\/p>\n

\u30d1\u30d6\u30ea\u30c3\u30af \u30d7\u30ec\u30d3\u30e5\u30fc\u306e\u304a\u5ba2\u69d8\u306b\u306f\u3001Microsoft \u30bb\u30ad\u30e5\u30a2 \u30b9\u30b3\u30a2\u306b\u6b21\u306e\u65b0\u3057\u3044\u63a8\u5968\u4e8b\u9805\u304c\u8868\u793a\u3055\u308c\u307e\u3059\u3002<\/p>\n

    \n
  1. \u6539\u3056\u3093\u3092\u9632\u6b62\u3057\u3001\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u8a8d\u8a3c \u3092\u4fdd\u8b77\u3059\u308b\u305f\u3081\u306b LDAP \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u7f72\u540d\u3092\u8981\u6c42\u3059\u308b<\/li>\n
  2. LDAP\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u6697\u53f7\u5316\u3057\u3066\u3001\u8ee2\u9001 \u4e2d\u306e\u6a5f\u5bc6\u30c7\u30fc\u30bf\u3092\u4fdd\u8b77<\/li>\n
  3. LDAP \u30c1\u30e3\u30cd\u30eb \u30d0\u30a4\u30f3\u30c7\u30a3\u30f3\u30b0\u3092\u9069\u7528\u3057\u3066\u3001\u8a8d\u8a3c\u30bb\u30c3\u30b7\u30e7\u30f3\u3092\u508d\u53d7\u304b\u3089 \u4fdd\u8b77\u3057\u307e\u3059<\/li>\n
  4. \u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306e\u6574\u5408\u6027\u3092\u78ba\u4fdd\u3059\u308b\u305f\u3081\u306b LDAP \u30b5\u30fc\u30d0\u30fc\u7f72\u540d\u3092\u8981\u6c42\u3059\u308b<\/li>\n<\/ol>\n

    \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30b9\u30b3\u30a2\u306f\u3001\u3053\u308c\u3089\u306e\u63a8\u5968\u4e8b\u9805\u306e\u5b9f\u88c5\u306b\u57fa\u3065\u3044\u3066\u66f4\u65b0\u3055\u308c\u307e\u3059\u3002<\/p>\n

    [\u6e96\u5099\u3059\u308b\u305f\u3081\u306b\u3067\u304d\u308b\u3053\u3068:]<\/b><\/p>\n