19 questions with Microsoft Defender for Endpoint Training-related tags

Sort by: Updated
Updated Created Answers
0 answers

We received reports from our users that our URL is unsafe, but they are safe.

Hi there, I am trying to contact Microsoft Defender support, but I am experiencing difficulties getting in contact with anyone. I am writing regarding false positive alerts that our users are receiving from Microsoft Defender concerning our legitimate…

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
5,573 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,473 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
237 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
167 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2025-01-24T17:26:36.4766667+00:00
Tirta Wulandari 0 Reputation points
0 answers

API to get Microsoft Defender Campaigns

Is there a way to get the Campaigns data inside the Microsoft Defender Portal using an API?

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
5,573 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,473 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
237 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
167 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2025-01-06T10:36:01.8966667+00:00
Hashem Barakat 0 Reputation points
edited a comment 2025-01-23T20:59:51.6433333+00:00
James Hamil 26,961 Reputation points Microsoft Employee
1 answer

why is my defender vpn shutting off when I close the lid of my laptop

As a recent victim of fraud, one of the things I decided to do is add vpn to my ms defender app. What i found is the vpn does not stay connected when I close my laptop cover. I find that I must initiate it every time I use the laptop. What can I do to…

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
5,573 questions
Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
12,007 questions
Not Monitored
Not Monitored
Tag not monitored by Microsoft.
41,671 questions
Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,985 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2025-01-15T20:47:11.9266667+00:00
David Roy 0 Reputation points
answered 2025-01-17T03:18:25.04+00:00
Sumit 671 Reputation points
1 answer

Can I use Kusto Explorer on the Advanced hunting data from Defender portal?

Hello, Is it possible to use Kusto Explorer to run KQL queries on the data available on the Defender portal (Advanced Hunting section)? If not, will it be possible in the future ? Best Regards

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,473 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2025-01-13T16:57:31.3+00:00
Romain PRACCA 6 Reputation points
commented 2025-01-15T14:35:33.0833333+00:00
Givary-MSFT 35,131 Reputation points Microsoft Employee
2 answers

Offboarding a Device from MDE with a Deleted Tenant ID

I have a device that was onboarded to MDE under a DemoTenant that no longer exists. Now, I want to offboard it and onboard it to a new tenant. Can someone please assist?

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,473 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-03-28T09:33:03.83+00:00
Danish Batliwala 0 Reputation points
commented 2024-12-04T01:25:00.5866667+00:00
Aldo E. Majiah 0 Reputation points
2 answers

How to fully Uninstall/Clean-up Microsoft Defender Endpoint

Hello, We are having issues trying to use a migration tool to move our devices to another Microsoft tenant. It seems to be struggling gaining access and deleting a regkey that is link to a service for MDE. The tool is running and using the system…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,473 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
5,479 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
237 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-06-27T13:23:57.6933333+00:00
Dan Beeney 0 Reputation points
edited the question 2024-11-01T11:16:59.36+00:00
simo-k 2,160 Reputation points
1 answer

Microsoft Defender portal

why "View data-security operations" is mentioned 2 times for "**One of the following roles is required for Defender for Endpoint" This is any specific vedio explain about this table ? …

Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-10-09T13:21:37.8266667+00:00
Mahesh M 0 Reputation points
answered 2024-10-16T16:45:06.8266667+00:00
kguntaka 4,425 Reputation points Microsoft Vendor
2 answers

Can I subscribe Defender Plan II and Intune Plan I standalone without subscribing whole E3 or E5 package?

Hello, I would like to check if it is possible to subscribe Microsoft Defender plan II and Microsoft Intune plan I standalone if needed and Microsoft allows it.

Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
5,479 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-09-11T13:52:28.2566667+00:00
ashish shukla 0 Reputation points
edited the question 2024-10-07T02:20:53.03+00:00
Crystal-MSFT 51,226 Reputation points Microsoft Vendor
1 answer

How do I escalate to open a support ticket for a Microsoft platform that doesn't work, so you get routed to Microsoft Learn

The Microsoft Training Campaign does not work when a user list of domain users is uploaded via a CSV file. There is the option to upload users, the user list shows up as uploaded, but no emails or training campaigns are ever sent out. We've tried setting…

Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-07-31T20:11:53.17+00:00
Keya Arestad 0 Reputation points
commented 2024-08-03T11:50:58.0833333+00:00
kguntaka 4,425 Reputation points Microsoft Vendor
0 answers

KQL Query works in editor but not in Custom Detection Rules (scheduled)

I have the following query to find machines that have their Real Time Protection disabled: DeviceTvmSecureConfigurationAssessmentKB | join kind=innerunique DeviceTvmSecureConfigurationAssessment on ConfigurationId | join DeviceEvents on DeviceId | where…

Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
237 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-07-23T11:28:50.28+00:00
Christoffer Brydensholt 0 Reputation points
commented 2024-07-26T02:38:51.59+00:00
AmaranS 7,240 Reputation points Microsoft Vendor
1 answer One of the answers was accepted by the question author.

Is there a difference between SCCM endpoint and Defender for endpoint (P1 and P2)?

Can someone explain the difference between SCCM endpoint and Defender for endpoint (P1 and P2)? Also, I'd like to know if Defender for endpoint is an upgrade to SCCM endpoint and if it is worth the additional cost.

Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-07-01T13:27:06.51+00:00
Colin Freriks 20 Reputation points
commented 2024-07-03T22:18:02.18+00:00
VarunTha 11,555 Reputation points Microsoft Vendor
0 answers

Unable to onboard some devices in MS Defender

I have 6 devices enrolled in Intune, but only 3 devices are showing as onboarded in the Microsoft Defender portal. The other 3 devices are displaying a status of "Not applicable" in Intune. I am unable to identify any issues causing this…

Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
5,479 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,027 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-06-25T08:48:36.3933333+00:00
Ashutosh Batham 10 Reputation points
edited the question 2024-06-26T01:42:29.6733333+00:00
Grmacjon-MSFT 18,811 Reputation points
3 answers

Microsoft Intune connection with defender endpoint grayed out (A Microsoft Intune license was not found. )

I have a dev tenant with E5 Dev license, but i am not able to connect Intune with endpoint defender.

Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-05-29T19:39:42.62+00:00
Hamed, Ali 0 Reputation points
edited the question 2024-06-01T14:26:50.62+00:00
kguntaka 4,425 Reputation points Microsoft Vendor
1 answer

Defender For Endpoint Plan1 with M365 Business Standard

I have Business Standard+ Defender for Endpoint Plan 1. I was trying to enrol a device through Microsoft Defender portal. I went to Settings . But there is no Endpoint option in it. The only options available are Defender Portal , Defender Xdr, Email ,…

Microsoft Endpoint Manager Training
Microsoft Endpoint Manager Training
Microsoft Endpoint Manager: A Microsoft endpoint management platform that incorporates System Center Configuration Manager and Intune and provides endpoint security, device management, and intelligent cloud actions.Training: Instruction to develop new skills.
11 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-05-16T16:13:56.0133333+00:00
milo last 85 Reputation points
commented 2024-05-27T14:40:27.5333333+00:00
Akhilesh Vallamkonda 11,360 Reputation points Microsoft Vendor
1 answer One of the answers was accepted by the question author.

Endpoint/Intune Device Enrollment Authorization

Is there a way to create a script in Intune/Endpoint that when a device is trying enrolled with company portal to the tenant, sends or requires an authorization from an admin before completing the enrollment or compliant process? Or a conditional access…

Microsoft Authenticator
Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation.
7,825 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
5,479 questions
Microsoft Configuration Manager
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,027 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-05-16T15:44:17.4266667+00:00
Flavia 240 Reputation points
accepted 2024-05-17T11:34:51.62+00:00
Flavia 240 Reputation points
2 answers One of the answers was accepted by the question author.

Email notification when a automation investigation has started

Hi all, Is it possible for me as an admin to receive email notification if an automation investigation has taken place on a device / user?

Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-05-14T14:02:04.4566667+00:00
Aran Billen 901 Reputation points
edited the question 2024-05-15T09:49:51.7633333+00:00
kguntaka 4,425 Reputation points Microsoft Vendor
1 answer One of the answers was accepted by the question author.

VFP7 MICROSOFT VISUAL

Fatal error: Exception code = C0000005 @ 05/08/2024 10:59:06 AM. Error log file: C:\Program Files\Common Files\Microsoft Shared\VFP\vfp7rerr.log

Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-05-08T04:57:07.4433333+00:00
Elizer P. Pagtananan 20 Reputation points
commented 2024-05-09T05:08:03.34+00:00
Pradeep M 5,275 Reputation points Microsoft Vendor
1 answer

Mouse and Keyboard installtion blocked by DEfender for Endpoint ASR policy

Hi, I am creating a new policy for removal device protection under Defender for endpoint (ASR). now along with removal storage devices. all mouse and keyboard's are getting blocked. is there a way to exclude such devices from policy?

Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-04-11T11:31:33.1133333+00:00
AB_30 0 Reputation points
answered 2024-05-06T13:49:50.25+00:00
Pauline Mbabu 595 Reputation points Microsoft Employee
2 answers

Defender I use GPO Can Switch Config policy On Defender Mange by MDE device configuration management ?

Now plan deploy MDE my PC joins local AD which makes it difficult to manage policy through GPO. Is this possible? If I want to use Switch Gpo policy through Device configuration management MDE?

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
5,573 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,473 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-04-25T09:12:13.4166667+00:00
TECHIT SRIWICHAI 185 Reputation points
commented 2024-05-06T05:42:00.36+00:00
Akhilesh Vallamkonda 11,360 Reputation points Microsoft Vendor