Hi, Helen McCreadie
I hear your frustration, and I’ll keep this simple and practical.
First, two quick clarifications and then a clean‑slate fix you can follow end‑to‑end.
What “MSA” means (plain English)
- MSA = Personal Microsoft account. It’s the same type of account you use for Xbox, Outlook.com email, OneDrive, and Microsoft 365 Personal/Family.
- A work/school account is an organization‑managed account (usually ends with a school or company domain) and follows different sign‑in rules.
Your daughter should sign into Defender (for individuals) with her personal Microsoft account - the exact one that shows “Microsoft 365 Family - shared and managed by (your name)” under Services. That wording is OK, it confirms the Family share is attached to her account.
Why you’re seeing “you cannot sign in with this personal account; try a work or school account”
On Android, when multiple identities exist (school account, test alias, Gmail‑backed identity, etc.), the OS and the Microsoft sign‑in components can present the wrong sign‑in route. If the app or account picker hands the organizational sign‑in path to the consumer Defender app, you’ll get exactly that message—even though the Family license is fine.
Clean‑slate fix (do these in order)
A. Confirm the license on the web (quick check)
Do this in a mobile or desktop browser (not in the app):
- You (Family organizer) sign in at your Microsoft account’s Services page and verify Microsoft 365 Family is active.
- Your daughter signs in to her Services page. Seeing “Microsoft 365 Family — shared and managed by (your name)” is correct. No change needed.
If sign‑in to the website fails for either of you, skip to section D. If web sign‑in is failing, then come back here.
B. Remove “identity noise” on the phone (no data loss)
This prevents Android from auto‑offering the wrong account to Defender.
- Open Settings > Apps > Microsoft Defender Storage > Clear data and Clear cache.
- If Microsoft Authenticator is installed: Settings > Apps > Microsoft Authenticator Storage > Clear data and Clear cache.
- In Settings > Accounts (or Passwords & accounts):
- Remove any temporary Outlook.com alias the tech added if you can find it.
- Keep the school account if she needs Outlook for school—but we’ll make sure Defender doesn’t use it.
- Uninstall the Microsoft Defender app. Then reinstall from Google Play (consumer listing, publisher Microsoft Corporation). Do not open it yet.
C. Sign in to Defender with only her personal account
- Open Microsoft Defender.
- On the account chooser, do not tap the pre‑listed school email or any alias. Tap “Sign in with a different account” at the bottom.
- Manually type her personal Microsoft account email (the one that shows the Family share on the Services page) and enter the password.
- Complete any verification prompts (text/email/Authenticator) tied to her personal account.
- If you see permissions prompts (Accessibility, Notifications, battery optimization), allow them so Defender can protect the device.
Important: You do not need the Microsoft 365 Copilot app to find Defender. Defender is a separate app. It won’t appear inside Copilot > Apps.
D. If web sign‑in is failing (“cannot sign in with this personal account”)
This is a separate sign‑in routing problem. Fix it first, then repeat Section C.
Try these, in order:
- Use a different browser on the phone (e.g., Samsung Internet or Firefox). Sometimes the default browser has stale cookies that force a work/school route.
- Clear cookies/site data for Microsoft sites in the browser you’re using.
- If Microsoft Authenticator is installed, open it and remove any work/school accounts listed there; keep only the personal one.
- If there’s an Android Work profile, make sure you’re opening the browser and Defender from the Personal profile (not the Work one). Apps opened from Work can force organizational sign‑in.
- Try web sign‑in again to her Services page with her personal email and password. Once that works, go back to Section C and sign into Defender.
E. If the sign‑in still shows the wrong accounts
Use the manual route every time:
In Defender’s account screen, always choose “Sign in with a different account”, then type her personal email and password—even if her personal account appears in the list. This bypasses cached tokens and forces the consumer path.
F. What not to worry about
- The wording “shared and managed by (your name)” is fine. It still means your daughter gets the Family license benefits, including Defender.
- Not seeing “Defender” inside the Microsoft 365 Copilot app is expected. Defender is standalone from the Play Store.