shared settings : Number of days until partner is unresponsive

J-3804 1,596 Reputation points
2024-05-14T03:50:37.26+00:00

Hello,

I hope this message finds you well. I am seeking clarification on the “Shared settings: Number of days until partner is unresponsive” option found under Endpoint Security > Microsoft Defender for Endpoint. Specifically, I would like to understand if the “Number of days until partner is unresponsive” setting means that a device will be offboarded from Defender if it is not in use for 7 days. For instance, if a user is on vacation for 2 weeks, will their device be automatically offboarded from Defender?

Thank you for your assistance.

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,435 questions
Microsoft Intune Security
Microsoft Intune Security
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
442 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
5,306 questions
0 comments No comments
{count} votes

Accepted answer
  1. ZhoumingDuan-MSFT 14,315 Reputation points Microsoft Vendor
    2024-05-14T07:05:51.1833333+00:00

    @J-3804, Danny, Thanks for posting in Q&A.

    Based on my research, the setting means Number of continuous days with no signal from the partner before Intune considers the partner unresponsive. For unresponsive partners, Intune will consider the connection lost and ignore the threat level/risk score across all devices.

    So, if a user is on vacation for 2 weeks, their device will not automatically offboarded from Defender and the status will be unresponsive, but when the user returns and their device starts communicating with Intune again, the status will be updated, and Intune will consider the partner (Microsoft Defender for Endpoint) to be responsive.

    Hope it will help.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    1 person found this answer helpful.
    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.