I am checking the Password Leak detection using Credential Guard.
I have one question/problem though.
pwd_leak log seems to appear only if we enable blocking users from login using leaked password.
Is there some option that allows to get those logs but allow user to login?
Ok. Can be closed as discovered that this appears only once per password → so it can appear without blocking the user, just won’t happen with the next login so it seems.
We enabled blocking either way.
Thank you for letting us know!