Disable Microsoft Defender for Identity Check

Question

I'm trying to figure out how to disable or suppress a specific check in Microsoft Defender for Identity, and I'm not seeing where to do it.

I'm getting this notification each day: Auditing on the ADFS container is not enabled as required on domainname.local.

We're not using ADFS so we didn't configure auditing for it. How can I suppress this?

Thanks

Answer 1

IIRC that's a "health issue" and you should be able to suppress the notifications by selecting the corresponding item under Identities > Health issues. More details here: https://learn.microsoft.com/en-us/defender-for-identity/health-alerts

Just in case, you might also check rule exclusions as detailed for example here: https://learn.microsoft.com/en-us/defender-for-identity/exclusions#exclusions-by-detection-rule