What and whyWindows updates released in October 2026 will begin Enforcement mode for AD FS Distributed Key Manager (DKM) container ACL hardening. This hardening change is designed to address the elevation of privilege vulnerability documented in CVE-2026-56155 by automatically remediating insecure DKM container ACL configurations on supported Windows Server versions. Organizations using Active Directory Federation Services (AD FS) should use the remaining Audit mode period to review DKM containe...
Applies to: Windows
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).