Troubleshoot service issues
- Microsoft Defender for Endpoint Plan 1
- Microsoft Defender for Endpoint Plan 2
- Microsoft Defender XDR
Want to experience Defender for Endpoint? Sign up for a free trial.
This section addresses issues that might arise as you use the Microsoft Defender for Endpoint service.
Server error - Access is denied due to invalid credentials
If you encounter a server error when trying to access the service, you need to change your browser cookie settings. Configure your browser to allow cookies.
Elements or data missing on the portal
If some elements or data is missing on Microsoft Defender XDR, it's possible that proxy settings are blocking it.
Make sure that
*.security.microsoft.com is included the proxy allowlist.
You must use the HTTPS protocol when adding the following endpoints.
Microsoft Defender for Endpoint service shows event or error logs in the Event Viewer
See Review events and errors using Event Viewer for a list of event IDs that are reported by the Microsoft Defender for Endpoint service. The article also contains troubleshooting steps for event errors.
Microsoft Defender for Endpoint service fails to start after a reboot and shows error 577
If onboarding devices successfully completes but Microsoft Defender for Endpoint doesn't start after a reboot and shows error 577, check that Windows Defender isn't disabled by a policy.
For more information, see Ensure that Microsoft Defender Antivirus is not disabled by policy.
Known issues with regional formats
Date and time formats
There are some known issues with the time and date formats.
The following date formats are supported:
The following date and time formats are currently not supported:
- Date format yyyy/MM/dd
- Date format dd/MM/yy
- Date format with yy. Will only show yyyy.
- Time format HH:mm:ss isn't supported (the 12 hour AM/PM format isn't supported). Only the 24-hour format is supported.
Use of comma to indicate thousand
Support of use of comma as a separator in numbers aren't supported. Regions where a number is separated with a comma to indicate a thousand, will only see the use of a dot as a separator. For example, 15,5 K is displayed as 15.5 K.
Want to experience Microsoft Defender for Endpoint? Sign up for a free trial.
Microsoft Defender for Endpoint tenant was automatically created in Europe
When you use Microsoft Defender for Cloud to monitor servers, a Microsoft Defender for Endpoint tenant is automatically created. The Microsoft Defender for Endpoint data is stored in Europe by default.
- Troubleshoot Microsoft Defender for Endpoint onboarding issues
- Review events and errors using Event Viewer
Do you want to learn more? Engage with the Microsoft Security community in our Tech Community: Microsoft Defender for Endpoint Tech Community.