19 questions with Microsoft Defender for Endpoint Training-related tags

Sort by: Updated
Updated Created Answers
1 answer

Microsoft Defender Disabled when deploy Microsoft Defender for Endpoint via Intune

Hi!! We are deployment Microsoft Defender for Endpoint via Intune and we have an issue with some devices, they appear as disabled in Microsoft Defender Console: When we run MpComputerStatus this is the result: There are others devices that using the…

Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
5,569 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2025-02-19T13:31:57.96+00:00
Alejandro Miranda 20 Reputation points
commented 2025-02-24T02:10:43.17+00:00
Crystal-MSFT 52,321 Reputation points Microsoft Vendor
1 answer One of the answers was accepted by the question author.

Defender for server Antivirus

Dear All, Please help with below queries : Is EDR and Antivirus capability included in 'Defender for server Plan 1' , if yes, then do we also pay for 'Defender for endpoint' ? I have read somewhere that with 'Defender for Server', integration with…

Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2025-02-17T14:18:55.1333333+00:00
Munaf Shaikh 25 Reputation points
accepted 2025-02-21T11:26:02.85+00:00
Munaf Shaikh 25 Reputation points
1 answer One of the answers was accepted by the question author.

Known file getting tagged as malicious

I have a single macros enabled excel file, every time I make changes and save it with different name Defender MDE flags it as malicious and file gets corrupted. Every time I make changes, SHA value changes and hence submitting it to Microsoft as clean…

Excel
Excel
A family of Microsoft spreadsheet software with tools for analyzing, charting, and communicating data.
2,175 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,497 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2025-02-04T14:22:31.1366667+00:00
Aishwarya RM 20 Reputation points
accepted 2025-02-06T10:01:19.05+00:00
Aishwarya RM 20 Reputation points
1 answer

why is my defender vpn shutting off when I close the lid of my laptop

As a recent victim of fraud, one of the things I decided to do is add vpn to my ms defender app. What i found is the vpn does not stay connected when I close my laptop cover. I find that I must initiate it every time I use the laptop. What can I do to…

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
5,766 questions
Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
12,077 questions
Not Monitored
Not Monitored
Tag not monitored by Microsoft.
42,349 questions
Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
3,008 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2025-01-15T20:47:11.9266667+00:00
David Roy 0 Reputation points
commented 2025-01-28T07:08:05.8766667+00:00
Catherine Kyalo 750 Reputation points Microsoft Employee
2 answers

Offboarding a Device from MDE with a Deleted Tenant ID

I have a device that was onboarded to MDE under a DemoTenant that no longer exists. Now, I want to offboard it and onboard it to a new tenant. Can someone please assist?

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,497 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-03-28T09:33:03.83+00:00
Danish Batliwala 0 Reputation points
commented 2024-12-04T01:25:00.5866667+00:00
Aldo E. Majiah 0 Reputation points
2 answers

How to fully Uninstall/Clean-up Microsoft Defender Endpoint

Hello, We are having issues trying to use a migration tool to move our devices to another Microsoft tenant. It seems to be struggling gaining access and deleting a regkey that is link to a service for MDE. The tool is running and using the system…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,497 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
5,569 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
251 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-06-27T13:23:57.6933333+00:00
Dan Beeney 0 Reputation points
edited the question 2024-11-01T11:16:59.36+00:00
simo-k 2,885 Reputation points
1 answer

Microsoft Defender portal

why "View data-security operations" is mentioned 2 times for "**One of the following roles is required for Defender for Endpoint" This is any specific vedio explain about this table ? …

Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-10-09T13:21:37.8266667+00:00
Mahesh M 0 Reputation points
answered 2024-10-16T16:45:06.8266667+00:00
kguntaka 4,920 Reputation points Microsoft Vendor
2 answers

Can I subscribe Defender Plan II and Intune Plan I standalone without subscribing whole E3 or E5 package?

Hello, I would like to check if it is possible to subscribe Microsoft Defender plan II and Microsoft Intune plan I standalone if needed and Microsoft allows it.

Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
5,569 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-09-11T13:52:28.2566667+00:00
ashish shukla 0 Reputation points
edited the question 2024-10-07T02:20:53.03+00:00
Crystal-MSFT 52,321 Reputation points Microsoft Vendor
1 answer

How do I escalate to open a support ticket for a Microsoft platform that doesn't work, so you get routed to Microsoft Learn

The Microsoft Training Campaign does not work when a user list of domain users is uploaded via a CSV file. There is the option to upload users, the user list shows up as uploaded, but no emails or training campaigns are ever sent out. We've tried setting…

Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-07-31T20:11:53.17+00:00
Keya Arestad 0 Reputation points
commented 2024-08-03T11:50:58.0833333+00:00
kguntaka 4,920 Reputation points Microsoft Vendor
0 answers

KQL Query works in editor but not in Custom Detection Rules (scheduled)

I have the following query to find machines that have their Real Time Protection disabled: DeviceTvmSecureConfigurationAssessmentKB | join kind=innerunique DeviceTvmSecureConfigurationAssessment on ConfigurationId | join DeviceEvents on DeviceId | where…

Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
251 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-07-23T11:28:50.28+00:00
Christoffer Brydensholt 0 Reputation points
commented 2024-07-26T02:38:51.59+00:00
AmaranS 7,250 Reputation points Microsoft Vendor
1 answer One of the answers was accepted by the question author.

Is there a difference between SCCM endpoint and Defender for endpoint (P1 and P2)?

Can someone explain the difference between SCCM endpoint and Defender for endpoint (P1 and P2)? Also, I'd like to know if Defender for endpoint is an upgrade to SCCM endpoint and if it is worth the additional cost.

Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-07-01T13:27:06.51+00:00
Colin Freriks 20 Reputation points
commented 2024-07-03T22:18:02.18+00:00
VarunTha 12,840 Reputation points Microsoft Vendor
0 answers

Unable to onboard some devices in MS Defender

I have 6 devices enrolled in Intune, but only 3 devices are showing as onboarded in the Microsoft Defender portal. The other 3 devices are displaying a status of "Not applicable" in Intune. I am unable to identify any issues causing this…

Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
5,569 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,422 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-06-25T08:48:36.3933333+00:00
Ashutosh Batham 10 Reputation points
edited the question 2024-06-26T01:42:29.6733333+00:00
Grmacjon-MSFT 18,816 Reputation points
3 answers

Microsoft Intune connection with defender endpoint grayed out (A Microsoft Intune license was not found. )

I have a dev tenant with E5 Dev license, but i am not able to connect Intune with endpoint defender.

Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-05-29T19:39:42.62+00:00
Hamed, Ali 0 Reputation points
edited the question 2024-06-01T14:26:50.62+00:00
kguntaka 4,920 Reputation points Microsoft Vendor
1 answer

Defender For Endpoint Plan1 with M365 Business Standard

I have Business Standard+ Defender for Endpoint Plan 1. I was trying to enrol a device through Microsoft Defender portal. I went to Settings . But there is no Endpoint option in it. The only options available are Defender Portal , Defender Xdr, Email ,…

Microsoft Endpoint Manager Training
Microsoft Endpoint Manager Training
Microsoft Endpoint Manager: A Microsoft endpoint management platform that incorporates System Center Configuration Manager and Intune and provides endpoint security, device management, and intelligent cloud actions.Training: Instruction to develop new skills.
13 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-05-16T16:13:56.0133333+00:00
milo last 85 Reputation points
commented 2024-05-27T14:40:27.5333333+00:00
Akhilesh Vallamkonda 12,180 Reputation points Microsoft Vendor
1 answer One of the answers was accepted by the question author.

Endpoint/Intune Device Enrollment Authorization

Is there a way to create a script in Intune/Endpoint that when a device is trying enrolled with company portal to the tenant, sends or requires an authorization from an admin before completing the enrollment or compliant process? Or a conditional access…

Microsoft Authenticator
Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation.
8,152 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
5,569 questions
Microsoft Configuration Manager
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,422 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-05-16T15:44:17.4266667+00:00
Flavia 240 Reputation points
accepted 2024-05-17T11:34:51.62+00:00
Flavia 240 Reputation points
2 answers One of the answers was accepted by the question author.

Email notification when a automation investigation has started

Hi all, Is it possible for me as an admin to receive email notification if an automation investigation has taken place on a device / user?

Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-05-14T14:02:04.4566667+00:00
Aran Billen 906 Reputation points
edited the question 2024-05-15T09:49:51.7633333+00:00
kguntaka 4,920 Reputation points Microsoft Vendor
1 answer One of the answers was accepted by the question author.

VFP7 MICROSOFT VISUAL

Fatal error: Exception code = C0000005 @ 05/08/2024 10:59:06 AM. Error log file: C:\Program Files\Common Files\Microsoft Shared\VFP\vfp7rerr.log

Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-05-08T04:57:07.4433333+00:00
Elizer P. Pagtananan 20 Reputation points
commented 2024-05-09T05:08:03.34+00:00
Pradeep M 6,315 Reputation points Microsoft Vendor
1 answer

Mouse and Keyboard installtion blocked by DEfender for Endpoint ASR policy

Hi, I am creating a new policy for removal device protection under Defender for endpoint (ASR). now along with removal storage devices. all mouse and keyboard's are getting blocked. is there a way to exclude such devices from policy?

Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-04-11T11:31:33.1133333+00:00
AB_30 0 Reputation points
answered 2024-05-06T13:49:50.25+00:00
Pauline Mbabu 595 Reputation points Microsoft Employee
2 answers

Defender I use GPO Can Switch Config policy On Defender Mange by MDE device configuration management ?

Now plan deploy MDE my PC joins local AD which makes it difficult to manage policy through GPO. Is this possible? If I want to use Switch Gpo policy through Device configuration management MDE?

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
5,766 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,497 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-04-25T09:12:13.4166667+00:00
TECHIT SRIWICHAI 185 Reputation points
commented 2024-05-06T05:42:00.36+00:00
Akhilesh Vallamkonda 12,180 Reputation points Microsoft Vendor