Skip to content
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 5 additions & 1 deletion defender-for-identity/investigate-domain.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ description: Learn how to investigate an Active Directory domain in Microsoft De
#customer intent: As a security admin, I want to view the security posture of my Active Directory domains so that I can identify coverage gaps, review security policies, and act on recommendations.
author: AbbyMSFT
ms.author: abbyweisberg
ms.date: 07/05/2026
ms.date: 07/29/2026
ms.topic: concept-article
ms.service: microsoft-defender-for-identity
ms.custom: msecd-doc-authoring-106
Expand Down Expand Up @@ -70,6 +70,10 @@ The tab includes default filters for **Status** (New, In progress) and **Alert s
| **Impacted assets** | The assets affected by the incident. |
| **Active alerts** | The number of active alerts in the incident. |

## Security recommendations

For scoped users, the domain page shows security recommendations for the domains included in their assigned scope. This view helps scoped users focus on the identity risks that are relevant to the domains they're responsible for. Customers can use this experience to provide domain-level recommendation context without granting broader access across the environment. Each recommendation includes relevant risk information, affected assets, and suggested remediation actions to help scoped users understand what needs attention. By making the right recommendations available to the right users, organizations can improve ownership and move more quickly from visibility to action while maintaining appropriate access boundaries.
Comment on lines +73 to +75

## Security Policies tab

Provides human-readable summaries of key Active Directory security policies in four cards. Use this tab to review critical Active Directory configurations and check whether they meet current security standards.
Expand Down
Loading