277 questions with Microsoft Security | Microsoft Defender | Microsoft Defender for Identity tags

Sort by: Updated
4 answers

Security Recommendations for LAPS are outdated

These recommendations in the Microsoft Secure Score seems to be ignoring the new Windows LAPS and looking at the old LAPS. When we changed over to the Windows LAPS, these recommendations started getting flagged. I thought Microsoft would eventually…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
Windows for business | Windows Server | User experience | Other
Windows for business | Windows Client for IT Pros | User experience | Other
asked 2023-06-28T10:54:09.08+00:00
ADM-Griffin2, Jay 151 Reputation points
commented 2025-03-14T09:28:17.5366667+00:00
Stijn D'haese 0 Reputation points
2 answers

Why defender is not correlating the Entra ID protection alerts?

Hi Team, In my environment, Entra ID Protection is generating multiple alerts even when the user, IP address, and sign-in events are the same and occur within seconds. These alerts are forwarded to Microsoft Defender, but they are not being correlated,…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Sentinel
asked 2025-02-17T14:53:42.8366667+00:00
Supriya Nelluri 0 Reputation points
commented 2025-03-07T10:16:40.2733333+00:00
Anonymous
2 answers

Issue with Attack Simulator - Not all targeted users showing up

Hello, I'm currently experiencing issues with the Attack Simulator. I'm running a phishing simulation, and I've selected the "Include all users in my organization" option, which should total to 193 users. However, the pages are only adding up…

Microsoft 365 and Office | Install, redeem, activate | For business | Windows
Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2023-08-19T16:28:50.4133333+00:00
Maxxxi 5 Reputation points
commented 2025-03-06T20:11:14.37+00:00
Andrew Schuch 0 Reputation points
2 answers

Defender for Identity - Directory Services Advanced Auditing is not enabled

Hi Everyone, We have followed the following guide from Microsoft in regards to enabling "advanced auditing" for Defender for Identity: https://learn.microsoft.com/en-us/defender-for-identity/configure-windows-event-collection However, we keep…

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
Windows for business | Windows Client for IT Pros | User experience | Other
asked 2023-09-27T20:12:12.2233333+00:00
OwlTecAB 60 Reputation points
commented 2025-02-28T14:55:10.81+00:00
Carlton Whitmore 26 Reputation points
1 answer

Duplicated Defender AAD Identity Protection alerts due to different sign-in request ID in milliseconds

Hi, We are seeking some advise regarding the duplication alerts in our defender portal. Any help is greatly appreciated. Subject: Duplicated Defender AAD Identity Protection Alerts Due to Different Sign-In Request IDs in Milliseconds Alert Name:…

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2025-02-07T13:18:23.58+00:00
Joey W 0 Reputation points
edited a comment 2025-02-20T14:52:25.8666667+00:00
Anonymous
3 answers

Privacy protection VPN option is not visible on my Microsoft defender

Privacy protection VPN option is not visible on my Microsoft defender. Earlier I was used now it's not visible, I have 365 personal plan

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2024-12-10T00:50:54.28+00:00
Thirumal Vellingiri 10 Reputation points
commented 2025-02-20T05:49:50.72+00:00
Kimberly Traven 0 Reputation points
2 answers

How can I investigate risky sign in's to determine if an account is actually compromised?

I am trying to determine why some user sign in's are flagged as risky. When I check the IP address that was associated with the sign in, most of the time it is from a GTHost server. Our users are mostly using iPhones and trying to log into the…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2025-02-13T20:38:55.3966667+00:00
Carrie Ives 6 Reputation points
answered 2025-02-19T16:48:51.0366667+00:00
Carrie Ives 6 Reputation points
1 answer One of the answers was accepted by the question author.

Auto scan usb Windows 11

In Intune, devices, configurations - I have in place this policy with NO conflict and no scanning happens at all when I insert a usb device (I check event viewer) Enable Automatic Scanning of Removable Media Allow Archive Scanning Allow Behavior…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
Windows for business | Windows Client for IT Pros | User experience | Other
Microsoft Security | Intune | Other
asked 2025-02-14T12:50:58.0333333+00:00
amartinez_admin 20 Reputation points
accepted 2025-02-17T08:17:28.7766667+00:00
amartinez_admin 20 Reputation points
1 answer

How do I disable Weak Cipher on Private Endpoint

Hello Our internal vulnerabilities picked up weak cipher vulnerabilities on the private endpoints. I have been searching everywhere for solution to disable the weak cipher. Please help

Windows for business | Windows 365 Enterprise
Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2025-02-07T10:33:40.0433333+00:00
Marvin Tibane 1 Reputation point
commented 2025-02-11T08:25:36.3466667+00:00
Marvin Tibane 1 Reputation point
0 answers

Where do I manage old audit activity alerts?

I have an activity alert setup for an ACCOUNT A and was later changed for ACCOUNT B but we still receive alert for ACCOUNT A. I have checked everywhere and there is no alert setup for account A How can I find it? Tried Powershell too but not much…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
Microsoft Security | Microsoft Purview
asked 2025-01-30T19:20:51.0566667+00:00
Gurpreet Kaur Gill 0 Reputation points
commented 2025-02-11T02:02:34.62+00:00
phemanth 15,765 Reputation points Microsoft External Staff Moderator
3 answers

When a Computer slows down?

Need to know what questions are important to solve a problem of a slow down computer with windows 10

Windows for business | Windows Client for IT Pros | Networking | Network connectivity and file sharing
Windows for business | Windows Client for IT Pros | Devices and deployment | Configure application groups
Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
Windows for business | Windows Client for IT Pros | User experience | Other
asked 2024-09-08T00:49:05.1433333+00:00
answered 2025-02-08T17:39:25.7633333+00:00
Computer Guide Online 0 Reputation points
0 answers

Azure ATP sensor issue -DC not visible under the security portal

Hi,we have installed the Azure ATP sensor on 33 DC's. But one DC's sensor status was unhealthy. To resolve this, we have cleared the DC entry from security portal and again re-install the ATP but unfortunately this time the affected DCS is visible in…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2025-01-29T10:55:54.0633333+00:00
Khushboo 0 Reputation points
commented 2025-02-06T14:21:02.5966667+00:00
Raja Pothuraju 25,115 Reputation points Microsoft External Staff Moderator
1 answer

API to get Microsoft Defender Campaigns

Is there a way to get the Campaigns data inside the Microsoft Defender Portal using an API?

Microsoft 365 and Office | Install, redeem, activate | For business | Windows
Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud Apps
asked 2025-01-06T10:36:01.8966667+00:00
Hashem Barakat 0 Reputation points
edited the question 2025-02-06T14:06:09.9133333+00:00
Rakesh Gurram 15,715 Reputation points Microsoft External Staff Moderator
1 answer

We received reports from our users that our URL is unsafe, but they are safe.

Hi there, I am trying to contact Microsoft Defender support, but I am experiencing difficulties getting in contact with anyone. I am writing regarding false positive alerts that our users are receiving from Microsoft Defender concerning our legitimate…

Microsoft 365 and Office | Install, redeem, activate | For business | Windows
Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud Apps
asked 2025-01-24T17:26:36.4766667+00:00
Tirta Wulandari 0 Reputation points
edited the question 2025-02-06T13:54:43.6233333+00:00
Rakesh Gurram 15,715 Reputation points Microsoft External Staff Moderator
0 answers

Whats goin on?

<Event xmlns="__http://schemas.microsoft.com/win/2004/08/events/event__"> <System>   <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" />  …

Windows for business | Windows Client for IT Pros | Devices and deployment | Configure application groups
Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
Windows for business | Windows Client for IT Pros | User experience | Other
Microsoft Security | Microsoft Authenticator
Microsoft System Center | Other
asked 2024-12-30T13:57:06.6066667+00:00
Sherwin pillai 0 Reputation points
commented 2025-02-06T07:06:38.7533333+00:00
Shanmugesh D 0 Reputation points
1 answer One of the answers was accepted by the question author.

MDE managed devices

Hi! It is possible to manage Windows Servers with Defender for Endpoint and Intune. After setup, the Windows Server device appears in Intune. But can Devices > Configuration > Policies be deployed to it, or only policies under the Endpoint…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
Microsoft Security | Intune | Other
asked 2025-02-03T14:06:55.22+00:00
Artem Shaturskyi 220 Reputation points
accepted 2025-02-04T07:32:57.1333333+00:00
Artem Shaturskyi 220 Reputation points
0 answers

Windows Defender Definition Updates folder taking 256 GB of space and not able to delete the files

Windows Defender Definition Updates folder taking 256 GB of space and no free space left on C drive. Tried deleting the files but not able to do it. We are using Sophos Antivirus.

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2025-02-04T06:36:43.46+00:00
Chintan Shah 0 Reputation points
edited the question 2025-02-04T06:58:27.1366667+00:00
kguntaka 6,650 Reputation points Microsoft External Staff Volunteer Moderator
1 answer

Windows Defender Phishing Email Submission and Remediation

Hi, I have a question. We use gmail in my organization for email and Knowbe4 for phishing email submission and remediation. We have microsoft 365 licenses for all staff members. My organization is thinking of getting rid of Knowbe4 but I was wondering if…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud Apps
asked 2025-01-31T18:10:48.28+00:00
Ennis Pool 0 Reputation points
edited the question 2025-02-03T21:35:03.0933333+00:00
VarunTha 14,850 Reputation points Microsoft External Staff Moderator
1 answer One of the answers was accepted by the question author.

I removed defender and now I can't download files in Edge.

After configuring the windows defender, windows defender apt, and windows defender smartscreen processes not to start by removing the execute permissions on the corresponding exe files, I am unable to download files in Edge. When I try to download the…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
Windows for business | Windows Client for IT Pros | User experience | Other
Microsoft Edge | Microsoft Edge development
asked 2025-01-27T00:51:19.2733333+00:00
rikutotomizuka-6197 40 Reputation points
edited the question 2025-02-03T02:07:33.25+00:00
Anonymous
1 answer

MS Defender web protection / SmartScreen for Google Chrome and Firefox

Hi. We have our CE+ assessment in a few weeks. In our CE basic, we provided information about our browsers Edge, Google Chrome and Firefox they have MS Defender / SmartScreen options enabled for malicious sites and downloads. Unfortunately, MS Defender…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
Azure Advisor
Azure Advisor
An Azure personalized recommendation engine that helps users follow best practices to optimize Azure deployments.
160 questions
Microsoft Security | Intune | Security
Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
Microsoft Security | Intune | Other
asked 2025-01-20T13:18:10.62+00:00
Muhammad Arif 0 Reputation points
edited a comment 2025-01-27T14:21:59.44+00:00
Navya 20,730 Reputation points Microsoft External Staff Moderator