Edit

Troubleshoot service issues

  • Article

Applies to:

Want to experience Defender for Endpoint? Sign up for a free trial.

This section addresses issues that might arise as you use the Microsoft Defender for Endpoint service.

Server error - Access is denied due to invalid credentials

If you encounter a server error when trying to access the service, you need to change your browser cookie settings. Configure your browser to allow cookies.

Elements or data missing on the portal

If some elements or data is missing on Microsoft Defender XDR, it's possible that proxy settings are blocking it.

Make sure that *.security.microsoft.com is included the proxy allowlist.

Note

You must use the HTTPS protocol when adding the following endpoints.

Microsoft Defender for Endpoint service shows event or error logs in the Event Viewer

See Review events and errors using Event Viewer for a list of event IDs that are reported by the Microsoft Defender for Endpoint service. The article also contains troubleshooting steps for event errors.

Microsoft Defender for Endpoint service fails to start after a reboot and shows error 577

If onboarding devices successfully completes but Microsoft Defender for Endpoint doesn't start after a reboot and shows error 577, check that Windows Defender isn't disabled by a policy.

For more information, see Ensure that Microsoft Defender Antivirus is not disabled by policy.

Known issues with regional formats

Date and time formats

There are some known issues with the time and date formats.

The following date formats are supported:

  • MM/dd/yyyy
  • dd/MM/yyyy

The following date and time formats are currently not supported:

  • Date format yyyy/MM/dd
  • Date format dd/MM/yy
  • Date format with yy. Will only show yyyy.
  • Time format HH:mm:ss isn't supported (the 12 hour AM/PM format isn't supported). Only the 24-hour format is supported.

Use of comma to indicate thousand

Support of use of comma as a separator in numbers aren't supported. Regions where a number is separated with a comma to indicate a thousand, will only see the use of a dot as a separator. For example, 15,5 K is displayed as 15.5 K.

Want to experience Microsoft Defender for Endpoint? Sign up for a free trial.

Microsoft Defender for Endpoint tenant was automatically created in Europe

When you use Microsoft Defender for Cloud to monitor servers, a Microsoft Defender for Endpoint tenant is automatically created. The Microsoft Defender for Endpoint data is stored in Europe by default.

Tip

Do you want to learn more? Engage with the Microsoft Security community in our Tech Community: Microsoft Defender for Endpoint Tech Community.