Microsoft 365 Defender for Business not updating exposed devices

Question

Dear all,

I have been working with Microsoft 365 Defender for Business for several months now in synchronization with Microsoft Intune.

I have been mitigating vulnerabilities through packet updates (Google Chrome, Adobe Acrobat and so on) with any issue with it.

Moreover, I know Windows 10, 11, Office, Edge and Teams updates deploy slow but automatically.

My main concern is that until now, all automatic updates were installed and the exposed devices in Defender slowly went down from all exposed devices to 0.

However, since last big zero-day update form Windows 10 and 11 (around 11th of July), the exposed devices number from these vulnerabilities doesn't change.

I can surely affirm, some devices are updated due to automatic or manual update done by myself.

It has been two weeks since then but number of exposed devices keeps the same.

Any help with this issue would be kindly appreciated.

Answer 1

Hello,

If you are experiencing issues with Microsoft 365 Defender for Business not updating the exposed devices count after the Windows 10 and 11 zero-day update around 11th of July, there are a few troubleshooting steps you can try to resolve the problem:

Verify Microsoft 365 Defender Data Sync: Ensure that the data sync between Microsoft 365 Defender and Microsoft Intune is functioning correctly. Check the synchronization logs and settings to confirm that data is being updated and shared properly between the two services.

Check Vulnerability Scan Settings: Review the vulnerability scan settings in Microsoft 365 Defender to ensure that the scans are being performed regularly and accurately. Verify that the scan schedules and configurations are appropriate for your organization's needs.

Check Endpoint Status and Connection: Verify that the affected devices are properly connected to Microsoft 365 Defender and Intune. Check the status of the devices in both platforms to see if there are any connectivity issues or errors.

Force Vulnerability Scan: Consider manually initiating a vulnerability scan on specific devices to check if the exposed devices count updates correctly. This can help determine if the issue is related to the automatic scanning process.

Review Update Deployment Policies: Check the update deployment policies in Microsoft Intune to ensure that they are correctly configured. Verify that the policies are targeting the appropriate devices and updates are being deployed as expected.

Check Update Status on Devices: On the devices that are not getting updated in Microsoft 365 Defender, manually check for updates and confirm that they are successfully installed. This will help identify if the issue lies with the update process on specific devices.

Check for Software Conflicts: Investigate if there are any third-party security software or applications on the devices that might be interfering with Microsoft 365 Defender's update process. Temporarily disable such software to test if they are causing the problem.

Review Event Logs and Logs from Intune: Examine the event logs on the affected devices and the logs from Intune for any error messages or warnings related to update deployments. This might provide insights into the cause of the issue.

Contact Microsoft Support: If the problem persists and you are unable to identify the root cause, consider reaching out to Microsoft Support for further assistance. They can analyze specific logs and configurations to help troubleshoot the issue.

It's important to address any potential issues with updating exposed devices promptly to maintain the security and health of your organization's devices. Regularly checking for updates and maintaining proper configurations in Microsoft 365 Defender and Intune can help ensure that devices are protected against vulnerabilities.

I used AI provided by ChatGPT to formulate part of this response. I have verified that the information is accurate before sharing it with you.

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer–