Allow Indicator Rule in Microsoft Defender Not Functioning

Question

As per our company’s information security policies, access to WhatsApp Web is restricted. However, it is necessary to grant access to certain users. To address this, we configured the Indicator setting in Microsoft Defender to Allow. Despite this configuration, users in the specified group are still unable to access WhatsApp Web.

Our devices are managed via Intune. While troubleshooting, we encountered error messages, which are attached as screenshots for your reference.

We kindly request assistance with the following:

1. Steps required to ensure the Allow Indicator setting works as expected.
2. Any specific changes needed in Intune or Defender configurations to resolve this issue.

Thank you in advance for your prompt support.

Answer 1

@Kerimcan Öztürk Thanks for posting in our Q&A.

For this issue, it seems more related to Microsoft Defender. To get more accurate help, it is suggested to contact Microsoft Defender support. Here is the support link:

https://learn.microsoft.com/en-us/defender-endpoint/contact-support

Thanks for your understanding and hope everything goes well with you.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.