MC1073068 — Microsoft Defender for Identity: We will disable collection of local administrators' group members (using SAM-R)

Microsoft Defender for Identity will disable the remote collection of local administrators' group members using SAM-R queries starting early May 2025. This change will impact the ability to map potential lateral movement paths. No admin action is required unless NTLM is disabled and you need the feature reenabled.