{"id":14422,"date":"2026-01-07T03:01:18","date_gmt":"2026-01-06T18:01:18","guid":{"rendered":"https:\/\/m365jp.net\/?p=14422"},"modified":"2026-01-07T03:02:36","modified_gmt":"2026-01-06T18:02:36","slug":"mc1193410-updated-automatic-windows-event-auditing-configuration-availability-for-unified-sensors-v3-x","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2026-01-07-mc1193410-updated-automatic-windows-event-auditing-configuration-availability-for-unified-sensors-v3-x","title":{"rendered":"MC1193410 | (Updated) Automatic Windows event auditing configuration availability for unified sensors (V3.x)"},"content":{"rendered":"
\n
\n
\n\n\n\n
MC1193410 | (Updated) Automatic Windows event auditing configuration availability for unified sensors (V3.x)<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n\n\n\n\n\n\n\n\n
Classification<\/th>\nstayInformed<\/td>\n<\/tr>\n
Last Updated<\/th>\n01\/06\/2026 17:31:48<\/td>\n<\/tr>\n
Start Time<\/th>\n12\/09\/2025 00:13:56<\/td>\n<\/tr>\n
End Time<\/th>\n03\/02\/2026 08:00:00<\/td>\n<\/tr>\n
Message Content<\/th>\n\n

Updated January 6, 2026: We have updated the timeline. Thank you for your patience. <\/p>\n

[Introduction]<\/b><\/p>\n

<\/p>\n

We\u2019re introducing a new opt-in feature<\/b> for automatic event-auditing configuration<\/b> in Microsoft Defender for Identity unified sensors (v3.x)<\/b>. This enhancement simplifies deployment by automatically applying the required Windows event-auditing settings<\/b> on sensors, reducing manual post-deployment steps and ensuring consistent policy enforcement across all onboarded sensors.<\/p>\n

[When this will happen:]<\/b><\/p>\n

<\/p>\n

    <\/p>\n
  • General Availability (Worldwide, GCC, GCCH, and DoD): The auditing opt-in feature will be available starting mid-January 2026 (previously early January), with rollout expected to complete by end of January 2026 (previously mid-January). Until then, it will remain disabled in the portal.<\/li>\n

    <\/p>\n

  • Related auditing health alerts<\/b> will also roll out gradually starting mid-January 2026 (previously early January), completing by end of January 2026 (previously mid-January).<\/li>\n

    <\/ul>\n

    [How this affects your organization:]<\/b><\/p>\n

    <\/p>\n

    Who is affected:<\/b> Admins managing Defender for Identity unified sensors (v3.x)<\/b> in Microsoft 365 tenants.<\/p>\n

    <\/p>\n

    What will happen:<\/b><\/p>\n

    <\/p>\n

      <\/p>\n
    • A new opt-in setting<\/b> will be available in both the UI<\/b> and via Graph API<\/b>.<\/li>\n

      <\/p>\n

    • In the UI, this option will appear under Defender for Identity Settings \u2192 Advanced features<\/b>.<\/li>\n

      <\/p>\n

    • Once enabled, the automatic configuration feature will:
      \n
        <\/p>\n
      • For new sensor activations<\/b>: Automatically apply all required Windows event-auditing settings<\/b> during activation.<\/li>\n

        <\/p>\n

      • For existing onboarded sensors<\/b>: Automatically apply Windows event-auditing settings<\/b> only if misconfigured and dismiss related health issues.<\/li>\n

        <\/ul>\n<\/li>\n

        <\/p>\n

      • After enabling the toggle, the automatic configuration process may take up to 24 hours to apply across all applicable Identity Unified sensors (v3.x)<\/b>.<\/li>\n

        <\/p>\n

      • This feature is not enabled by default and requires admin action. No changes will occur unless admins choose to enable the feature.<\/li>\n

        <\/ul>\n

        <\/p>\n

        Relevant auditing configurations health issues covered:<\/b><\/p>\n

        <\/p>\n

Machine Translation<\/th>\n\n

2026\u5e741\u67086\u65e5\u66f4\u65b0:\u30bf\u30a4\u30e0\u30e9\u30a4\u30f3\u3092\u66f4\u65b0\u3057\u307e\u3057\u305f\u3002\u3054\u8f9b\u62b1\u3044\u305f\u3060\u304d\u3042\u308a\u304c\u3068\u3046\u3054\u3056\u3044\u307e\u3059\u3002 <\/p>\n

[\u306f\u3058\u3081\u306b]<\/b><\/p>\n

<\/p>\n

Microsoft Defender for Identity unified sensors(v3.x)<\/b>\u306b\u304a\u3044\u3066\u3001\u81ea\u52d5\u30a4\u30d9\u30f3\u30c8\u76e3\u67fb\u8a2d\u5b9a<\/b>\u306e\u305f\u3081\u306e\u65b0\u3057\u3044\u30aa\u30d7\u30c8\u30a4\u30f3\u6a5f\u80fd\u3092<\/b>\u5c0e\u5165\u3057\u307e\u3059\u3002\u3053\u306e\u5f37\u5316\u306b\u3088\u308a\u3001\u5fc5\u8981\u306aWindows\u30a4\u30d9\u30f3\u30c8\u76e3\u67fb\u8a2d\u5b9a<\/b>\u3092\u30bb\u30f3\u30b5\u30fc\u306b\u81ea\u52d5\u7684\u306b\u9069\u7528\u3057\u3001\u5c55\u958b\u5f8c\u306e\u624b\u52d5\u4f5c\u696d\u3092\u524a\u6e1b\u3057\u3001\u3059\u3079\u3066\u306e\u30aa\u30f3\u30dc\u30fc\u30c7\u30a3\u30f3\u30b0\u30bb\u30f3\u30b5\u30fc\u3067\u4e00\u8cab\u3057\u305f\u30dd\u30ea\u30b7\u30fc\u9069\u7528\u3092\u78ba\u4fdd\u3057\u307e\u3059\u3002<\/p>\n

[\u3044\u3064\u8d77\u3053\u308b\u304b:]<\/b><\/p>\n

<\/p>\n