Defender for endpoint security baseline

Question

Hi, we have some win 10 hybrid joined devices that has stop connect to internet, if those are on domain network. Even static ip address does not work. When unpluging ethernet cable it will work couble second. i configure defender security baseline to all devices, will there be some firewall setting to block internet in some scenario? on guest network those will work.

Answer 1

Could it be in device isolation? https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/respond-machine-alerts?view=o365-worldwide#isolate-devices-from-the-network

Answer 2

Hello there,

In the Azure portal, go to All devices. Search for the device by using the device ID. Check the value under the join type column. Sometimes, the device might be reset or reimaged. So it's essential to also check the device registration state on the device.

You can use the dsregcmd command to do this.

https://learn.microsoft.com/en-us/azure/active-directory/devices/troubleshoot-device-dsregcmd

-----------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer-