MDI v3.x sensors on Windows Server 2025 domain controllers temporarily missing recent capability updates

[What and Why:]

Microsoft Defender for Identity (MDI) v3.x sensors running on Windows Server 2025 domain controllers (DCs) have temporarily not received the February 2026 and May 2026 capability updates. These DCs remain fully protected at their existing coverage level, but they do not yet include the newer detections introduced in those releases. This update ensures enterprise-ready security consistency while maintaining uninterrupted protection.

[Rollout Schedule:]

The fix will be delivered automatically with the July 2026 sensor update, targeted for late July 2026.

[Impact on Your Organization:]

Who is affected:

• Organizations running Microsoft Defender for Identity v3.x sensors on Windows Server 2025 domain controllers
• Other supported Windows Server versions are not affected

Platforms/Services:

• Microsoft Defender for Identity
• Windows Server 2025 domain controllers

What will happen:

• Windows Server 2025 DCs continue operating.
• The following sensor flavors are temporarily missing their latest updates on Windows Server 2025:
• AD FS
• AD CS
• Microsoft Entra Connect
• No regression in protection has occurred.

[Action Required/Recommendations:]

• No action is required.
• The updated capabilities will be delivered automatically with the July MDI sensor update for Windows Server 2025, currently targeted for late July 2026.
• You may continue with new MDI deployments on Windows Server 2025. Those domain controllers will receive the missing capabilities automatically once the update is available.
• Optional: Inform your security and identity teams that coverage is unchanged and no remediation is necessary.

Compliance considerations:

No compliance considerations identified, review as appropriate for your organization.