dkm acl

Today, October 13, 2026, Microsoft stops just watching AD FS key permissions and starts changing them. The October Windows security update moves the AD FS Distributed Key Manager (DKM) hardening into enforcement. On supported servers, AD FS will now rewrite an overly permissive ACL on its own...