Summary
Microsoft Defender for Identity is introducing a new sensor health issue, No Windows events received from domain controller, to help administrators identify when Defender for Identity sensors are not receiving expected Windows events from a domain controller.
Microsoft 365 Message Center ID: MC1455016
Last Modified: August 15, 2026
Category: Message Center
Tags: New feature, Admin impact
Status: Launched
Products & Platforms: Microsoft Defender XDR
This new health issue provides better visibility into potential event collection gaps that may affect Microsoft Defender for Identity detections, monitoring, and overall visibility for the affected domain controller.
Rollout Schedule
Available now.
Impact on Your Organization
Who is affected
Organizations using Microsoft Defender for Identity.
Service
Microsoft Defender for Identity
After this rollout:
- Administrators may see a new health issue, No Windows events received from domain controller, in the Sensors health issues tab and the global Health issues experience.
- The health issue will be displayed when Defender for Identity is not receiving expected Windows events from a domain controller.
- The notification helps administrators identify and investigate potential event collection gaps that could affect Defender for Identity visibility and detections for the affected domain controller.
Action Required / Recommendations
No action is required before the rollout.
If this health issue appears in your environment after rollout, review the affected domain controller and event collection configuration. If additional assistance is needed, contact Microsoft Support.
You may want to inform your security administrators about this new health monitoring capability.