Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Applies to:
- Microsoft Defender for Endpoint Plan 1
- Microsoft Defender for Endpoint Plan 2
- Microsoft Defender XDR
This page provides detailed steps to troubleshoot issues that might occur when setting up your Microsoft Defender for Endpoint service.
If you receive an error message, Microsoft Defender XDR provides a detailed explanation on what the issue is and relevant links are supplied.
No subscriptions found
If, while you're accessing Microsoft Defender XDR, you get an error message that says, "No subscriptions found," it means that the Microsoft Entra ID used to sign into the Microsoft Defender portal doesn't have a license for Defender for Endpoint.
Potential reasons:
- The Windows E5 and Office E5 licenses are separate licenses.
- The license was purchased but not provisioned to this Microsoft Entra instance.
- It could be a license provisioning issue.
- It could be you inadvertently provisioned the license to a different Microsoft Entra ID than the one used for authentication into the service.
For both cases, you should contact Microsoft support at General Microsoft Defender for Endpoint Support or Volume license support.
Your subscription has expired
If while accessing Microsoft Defender XDR you get a Your subscription has expired message, your online service subscription has expired. Microsoft Defender for Endpoint subscription, like any other online service subscription, has an expiration date.
You can choose to renew or extend the license at any point in time. When accessing the portal after the expiration date, a message appears that says, "Your subscription has expired." The message includes an option to download the device offboarding package, just in case you choose to not renew your subscription.
Note
For security reasons, the package used to Offboard devices will expire seven days after the date it was downloaded. Expired offboarding packages sent to a device are rejected. When downloading an offboarding package, you're notified of the package's expiry date and it is also included in the package name.
You are not authorized to access the portal
If you receive a message that says, "You are not authorized to access the portal," it's most likely because you haven't been granted access to the Microsoft Defender portal. Defender for Endpoint is a security monitoring, incident investigation and response product, and as such, access to it's restricted and controlled by your organization's security team. For more information, see, Assign user access to the portal.
Data currently isn't available on some sections of the portal
If the portal dashboard and other sections show an error message, such as "Data currently isn't available," you might need to allow subdomains.
You need to allow the security.windows.com and all subdomains under it on your web browser. For example, *.security.windows.com.
Portal communication issues
If you encounter issues with accessing the portal, missing data, or restricted access to portions of the portal, you need to verify that the following URLs are accessible through the browser for authorized users:
*.blob.core.windows.netcrl.microsoft.comhttps://*.microsoftonline-p.comhttps://*.security.microsoft.comhttps://automatediracs-eus-prd.security.microsoft.comhttps://login.microsoftonline.comhttps://login.windows.nethttps://onboardingpackagescusprd.blob.core.windows.nethttps://secure.aadcdn.microsoftonline-p.comhttps://security.microsoft.comhttps://static2.sharepointonline.com
Tip
Do you want to learn more? Engage with the Microsoft Security community in our Tech Community: Microsoft Defender for Endpoint Tech Community.