Troubleshooting issues on Microsoft Defender for Endpoint on Android

Статия
07/24/2024

Applies to:

Want to experience Microsoft Defender for Endpoint? Sign up for a free trial.

When onboarding a device, you might see sign in issues after the app is installed.

During onboarding, you might encounter sign in issues after the app is installed on your device.

This article provides solutions to help address the sign-on issues.

Sign in failed: Unexpected error, try later

Message:

Unexpected error, try later

Cause:

You have an older version of "Microsoft Authenticator" app installed on your device.

Solution:

Install latest version and of Microsoft Authenticator from Google Play Store and try again.

Sign in failed: Invalid license, contact administrator

Message: Invalid license, contact administrator

Cause:

You don't have Microsoft 365 license assigned, or your organization doesn't have a license for Microsoft 365 Enterprise subscription.

Solution:

Contact your administrator for help.

Report unsafe site

Phishing websites impersonate trustworthy websites for obtaining your personal or financial information. Visit the Provide feedback about network protection page if you want to report a website that could be a phishing site.

Phishing pages aren't blocked on some OEM devices

Applies to: Specific OEMs only

Xiaomi

Phishing and harmful web threats detected by Defender for Endpoint for Android aren't blocked on some Xiaomi devices. The following functionality doesn't work on these devices.

Cause:

Xiaomi devices include a new permission model. This permission model prevents Defender for Endpoint for Android from displaying pop-up windows while it runs in the background.

Xiaomi devices permission: "Display pop-up windows while running in the background."

Solution:

Enable the required permission on Xiaomi devices.

Display pop-up windows while running in the background.

Unable to allow permission for 'Permanent protection' during onboarding on some OEM devices

Applies to: Specific OEM devices only.

Xiaomi

Defender App asks for Battery Optimization/Permanent Protection permission on devices as part of app onboarding, and selecting Allow returns an error that the permission couldn't be set. It only affects the last permission called "Permanent Protection."

Cause:

Xiaomi changed the battery optimization permissions from Android 11 onwards. Defender for Endpoint isn't allowed to configure this setting to ignore battery optimizations.

Solution 1:

The Android devices Battery Optimization screen opens automatically as part of the onboarding flow where the user needs to give the permissions. The user must then follow these steps to get on-boarded:

Select Work Profile to see all of the work profile apps

Image of Battery Optimisation screen 2. Tap on Not optimised and select All Apps

Image of Optimisation dropdown menu

Image of All Apps option in the dropdown

Scroll down to find Microsoft Defender and tap on it

Image of All Apps including Microsoft Defender

Select Don’t Optimise option and tap on Done

Image of the Microsoft Defende Optimise drop down

Navigate back to Defender

Solution 2 (needed in case the Solution 1 does not work):

Install MDE app in personal profile. (Sign-in isn't required.)
Open the Company Portal and tap on Settings.
Go to the Battery Optimization section, tap on the Turn Off button, and then select on Allow to turn off Battery Optimization for the Company Portal.
Again, go to the Battery Optimization section and tap on the Turn On button. The battery saver section opens.
Find the Defender app and tap on it.
Select No Restriction. Go back to the Defender app in work profile and tap on Allow button.
The application shouldn't be uninstalled from personal profile for this to work.

Unable to use banking applications with MDE app

Applies to: Banking apps like iMobile Pay (ICICI), PNB ONE.

Cause: Android allows apps in the personal profile to check if there's a VPN active on the device, even outside of the personal profile. The banking app checks that and blocks it in VPN work profiles only. The banking app doesn't work with any other VPN product.

Solution: Users need to disable MDE VPN from the Settings page. The following steps can be used:

Go to Settings on the mobile device.
Search for VPN or open 'Network and Internet' and select on VPN.
Select on Microsoft Defender and select Disconnect.

Users should enable VPN when they're no longer using the banking app to ensure that their devices are protected.

Note

This a temporary workaround. We are working on other alternatives to provide users more control over the VPN settings from within the app.

Send in-app feedback

If a user faces an issue, which isn't already addressed in the above sections or is unable to resolve using the listed steps, the user can provide in-app feedback along with diagnostic data. Our team can then investigate the logs to provide the right solution. Users can follow these steps to do the same:

Open the MDE application on your device and select on the profile icon in the top-left corner.
Select "Help & feedback".
Select "Send feedback to Microsoft".
Choose from the given options. To report an issue, select "I want to report an issue".
Provide details of the issue that you're facing and check "Send diagnostic data". We recommend checking "Include your email address" so that the team can reach back to you with a solution or a follow-up.
Select on "Submit" to successfully send the feedback.