Devices onboarded to Intune are not showing up in Microsoft Defender

Question

I have followed the onboarding processes listed here https://learn.microsoft.com/en-us/mem/intune/protect/advanced-threat-protection-configure#enable-microsoft-defender-for-endpoint-in-intune

You can see the device here:

But not here after 24 hours:

I am open to any suggestions, thanks in advance!

More info about onboarding:

Answer 1

Hello @jpcapone,

I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to "Accept " the answer.

Issue: Devices onboarded to Intune are not showing up in Microsoft Defender

Solution: Resolved by @jpcapone.

Below are the steps followed by @jpcapone.

The DNS filtering tool used on your lab network was filtering out certain Microsoft endpoints so apparently the connection couldn't be made. After changing the DNS on the client NIC to use an external DNS server and all test devices joined successfully.

If you have any other questions or are still running into more issues, please let me know. Thank you again for your time and patience throughout this issue.

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Thanks,
Raja Pothuraju.

Answer 2

Hi @jpcapone

Have you selected option Connect Windows devices?

Also, you can check report in Endpoint Security section:

Best regards,

Aleksandr

---

If the response is helpful, please click "Accept Answer" and upvote it.

Answer 3

@jpcapone Thanks for posting in our Q&A.

Based on my check, what you configured is normal. To troubleshoot the issue, please follow the steps in the following link to check the logs to see which phase we are failed and if we can find any related error message:

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/troubleshoot-onboarding?view=o365-worldwide#troubleshoot-onboarding-issues-using-microsoft-intune

Or it is suggested to create an online support ticket to check if something wrong in backend. Here is the support link:

https://learn.microsoft.com/en-us/mem/get-support

If there is anything update, feel free to let us know.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 4

The problem was outbound DNS filtering was stopping the client from hitting certain Microsoft endpoints.  Once I changed DNS servers the issue went away.