MC1251207 Medium
Microsoft Secure Score: New recommendations for Microsoft Defender for Endpoint
Summary AI-generated
New Microsoft Secure Score recommendations for Defender for Endpoint help admins strengthen endpoint security; recommendations are off by default and need admin action to adopt.
Suggested actions AI-generated
- Review new Secure Score recommendations
- Complete recommended security actions
- Inform security and endpoint teams
- Update internal documentation as needed
Written by Azure OpenAI (gpt-4.1) from the text of the post below. It can be incomplete or wrong; the original post is authoritative.
Similar posts
Search for more like this- MC1191616 Microsoft Secure Score: New recommendations for Microsoft Defender for Endpoint
- MC1192254 Microsoft Defender for Endpoint: New Microsoft Secure Score recommendations
- MC1266905 Microsoft Secure Score: New recommendation for Microsoft Defender for Endpoint
- MC1466750 Microsoft Secure Score: New AI-readiness recommendations for device security
- MC1358832 (Updated) Microsoft Secure Score: New recommendation to reduce inbound internet exposure
- MC1179155 (Updated) Microsoft Defender for Identity: New recommendation added to Microsoft Secure Score
Original post from Microsoft
[Introduction]
We’re adding new Microsoft Secure Score recommendations for Microsoft Defender for Endpoint (MDE) to help your organization strengthen endpoint security and proactively reduce exposure to common attack techniques. These recommendations support more robust security baselines and help you assess and improve protection across your devices.
[When this will happen]
- Public Preview: Rollout began at the end of February 2026 and is expected to complete by mid‑March 2026.
[How this will affect your organization]
Who is affected
- Admins who manage Microsoft Defender for Endpoint and Microsoft Secure Score.
What will happen
Customers in Public Preview will see the following new Microsoft Secure Score recommendations:
- SMB server security hardening against authentication relay attacks:
- Block file transfer over Remote Desktop Protocol (RDP):
As these recommendations become available:
- Secure Score will update based on your organization’s implementation of the recommended actions.
- No changes will be made to your existing configurations unless you choose to enable the recommended settings.
- These recommendations are off by default and require admin action to adopt.
[What you can do to prepare]
- Review the new recommendations in Microsoft Secure Score as they become available.
- Complete the recommended actions to strengthen your endpoint security posture.
- Communicate these changes to your security and endpoint management teams.
- Update internal documentation if you track Secure Score or MDE configuration standards.
- Learn more: Microsoft Secure Score | Microsoft Defender XDR | Microsoft Defender | Microsoft Learn
[Compliance considerations]
No compliance considerations identified. Review as appropriate for your organization.
Additional details from Microsoft
- Summary
- New Microsoft Secure Score recommendations for Microsoft Defender for Endpoint will roll out in public preview from late February to mid-March 2026. They include SMB server hardening and blocking file transfer over RDP. Recommendations are off by default and require admin action to enable.