Azure AD - CVE-2020-1472 Netlogon Elevation of Privilege Vulnerability

Question

Can I safely assume Microsoft is going to handle the domain controller updates for domains completely managed by Azure AD? We have domain services enabled but no access to the domain controllers themselves. So I cannot monitor for the event ID's or apply the updates (except to my own domain joined devices).

For ref:
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1472
https://support.microsoft.com/en-us/help/4557222/how-to-manage-the-changes-in-netlogon-secure-channel-connections-assoc

Answer 1

Yes you can. Please take a look to How are Windows Updates applied in Azure AD Domain Services?

--
Please let us know if this answer was helpful to you. If so, please remember to mark it as the answer so that others in the community with similar questions can more easily find a solution.