AD FS Distributed Key Manager (DKM) container ACL hardening begins today

MC1506287 · published Oct 13, 2026 · 0 replies

What and whyBeginning with the October 2026 Windows security update, AD FS Distributed Key Manager (DKM) container access control list (ACL) hardening enters Enforcement mode. These protections address the elevation of privilege vulnerability described in CVE-2026-56155 by automatically remediating insecure DKM container ACL configurations on supported versions of Windows Server. Rollout scheduleEnforcement mode starts with the October 2026 Windows security update. Impact on your organizationAft...