QuestionQ30

VerifiedUser Assessment

While investigating an ongoing identity incident, you observe a stale user account logging in for the first time. How is a stale account defined?

Explanation

Microsoft Defender for Identity treats an Active Directory user account as stale when it has had no sign-in activity during the previous 90 days. This corresponds to more than three months of dormancy or inactivity.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!