You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/configure-machines-onboarding.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -25,7 +25,7 @@ ms.date: 12/18/2023
25
25
-[Microsoft Defender for Endpoint Plan 2](microsoft-defender-endpoint.md)
26
26
-[Microsoft Defender XDR](/defender-xdr)
27
27
28
-
> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://signup.microsoft.com/create-account/signup?products=7f379fee-c4f9-4278-b0a1-e4c8c2fcdf7e&ru=https://aka.ms/MDEp2OpenTrial?ocid=docs-wdatp-onboardconfigure-abovefoldlink)
28
+
> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://go.microsoft.com/fwlink/p/?linkid=2225630&clcid=0x409&culture=en-us&country=us)
29
29
30
30
Each onboarded device adds an additional endpoint detection and response (EDR) sensor and increases visibility over breach activity in your network. Onboarding also ensures that a device can be checked for vulnerable components as well security configuration issues and can receive critical remediation actions during attacks.
Copy file name to clipboardExpand all lines: defender-endpoint/mac-troubleshoot-mode.md
+1-3Lines changed: 1 addition & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,7 +15,7 @@ ms.collection:
15
15
ms.topic: conceptual
16
16
ms.subservice: macos
17
17
search.appverid: met150
18
-
ms.date: 02/06/2024
18
+
ms.date: 02/24/2025
19
19
---
20
20
21
21
# Troubleshooting mode in Microsoft Defender for Endpoint on macOS
@@ -29,8 +29,6 @@ ms.date: 02/06/2024
29
29
-[Microsoft Defender for Endpoint Plan 1](microsoft-defender-endpoint.md)
30
30
-[Microsoft Defender for Endpoint on macOS](microsoft-defender-endpoint-mac.md)
31
31
32
-
> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://go.microsoft.com/fwlink/p/?linkid=2225630&clcid=0x409&culture=en-us&country=us)
33
-
34
32
This article describes how to enable the troubleshooting mode in Microsoft Defender for Endpoint on macOS so admins can troubleshoot various Microsoft Defender Antivirus features temporarily, even if organizational policies manage the devices.
35
33
36
34
For example, if the tamper protection is enabled, certain settings can't be modified or turned off, but you can use troubleshooting mode on the device to edit those settings temporarily.
Copy file name to clipboardExpand all lines: defender-endpoint/troubleshoot-onboarding-error-messages.md
+8-11Lines changed: 8 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -26,15 +26,13 @@ ms.date: 07/18/2024
26
26
-[Microsoft Defender for Endpoint Plan 2](microsoft-defender-endpoint.md)
27
27
-[Microsoft Defender XDR](/defender-xdr)
28
28
29
-
> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://signup.microsoft.com/create-account/signup?products=7f379fee-c4f9-4278-b0a1-e4c8c2fcdf7e&ru=https://aka.ms/MDEp2OpenTrial?ocid=docs-wdatp-troublshootonboarding-abovefoldlink)
30
-
31
29
This page provides detailed steps to troubleshoot issues that might occur when setting up your Microsoft Defender for Endpoint service.
32
30
33
-
If you receive an error message, Microsoft Defender XDR will provide a detailed explanation on what the issue is and relevant links will be supplied.
31
+
If you receive an error message, Microsoft Defender XDR provides a detailed explanation on what the issue is and relevant links are supplied.
34
32
35
33
## No subscriptions found
36
34
37
-
If while accessing Microsoft Defender XDR you get a **No subscriptions found** message, it means the Microsoft Entra ID used to log in the user to the portal, does not have a Microsoft Defender for Endpoint license.
35
+
If, while you're accessing Microsoft Defender XDR, you get an error message that says, "No subscriptions found," it means that the Microsoft Entra ID used to sign into the Microsoft Defender portal doesn't have a license for Defender for Endpoint.
38
36
39
37
Potential reasons:
40
38
@@ -52,31 +50,30 @@ For both cases, you should contact Microsoft support at [General Microsoft Defen
52
50
53
51
If while accessing Microsoft Defender XDR you get a **Your subscription has expired** message, your online service subscription has expired. Microsoft Defender for Endpoint subscription, like any other online service subscription, has an expiration date.
54
52
55
-
You can choose to renew or extend the license at any point in time. When accessing the portal after the expiration date a **Your subscription has expired**message will be presented with an option to download the device offboarding package, should you choose to not renew the license.
53
+
You can choose to renew or extend the license at any point in time. When accessing the portal after the expiration date, a message appears that says, "Your subscription has expired." The message includes an option to download the device offboarding package, just in case you choose to not renew your subscription.
56
54
57
55
> [!NOTE]
58
-
> For security reasons, the package used to Offboard devices will expire 7 days after the date it was downloaded. Expired offboarding packages sent to a device will be rejected. When downloading an offboarding package you will be notified of the packages expiry date and it will also be included in the package name.
56
+
> For security reasons, the package used to Offboard devices will expire seven days after the date it was downloaded. Expired offboarding packages sent to a device are rejected. When downloading an offboarding package, you're notified of the package's expiry date and it is also included in the package name.
If you receive a **You are not authorized to access the portal**, be aware that Microsoft Defender for Endpoint is a security monitoring, incident investigation and response product, and as such, access to it is restricted and controlled by the user.
65
-
For more information, see, [**Assign user access to the portal**](/windows/threat-protection/windows-defender-atp/assign-portal-access-windows-defender-advanced-threat-protection).
62
+
If you receive a message that says, "You are not authorized to access the portal," it's most likely because you haven't been granted access to the Microsoft Defender portal. Defender for Endpoint is a security monitoring, incident investigation and response product, and as such, access to it's restricted and controlled by your organization's security team. For more information, see, [**Assign user access to the portal**](/windows/threat-protection/windows-defender-atp/assign-portal-access-windows-defender-advanced-threat-protection).
## Data currently isn't available on some sections of the portal
70
67
71
-
If the portal dashboard and other sections show an error message such as "Data currently isn't available":
68
+
If the portal dashboard and other sections show an error message, such as "Data currently isn't available," you might need to allow subdomains.
72
69
73
70
:::image type="content" source="media/atp-data-not-available.png" alt-text="The data unavailability notification message" lightbox="media/atp-data-not-available.png":::
74
71
75
-
You'll need to allow the `security.windows.com` and all subdomains under it on your web browser. For example, `*.security.windows.com`.
72
+
You need to allow the `security.windows.com` and all subdomains under it on your web browser. For example, `*.security.windows.com`.
76
73
77
74
## Portal communication issues
78
75
79
-
If you encounter issues with accessing the portal, missing data, or restricted access to portions of the portal, you'll need to verify that the following URLs are accessible through the browser for authorized users:
76
+
If you encounter issues with accessing the portal, missing data, or restricted access to portions of the portal, you need to verify that the following URLs are accessible through the browser for authorized users:
Copy file name to clipboardExpand all lines: defender-endpoint/troubleshoot-siem.md
+2-5Lines changed: 2 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -13,7 +13,7 @@ ms.collection:
13
13
- tier3
14
14
ms.topic: troubleshooting
15
15
search.appverid: met150
16
-
ms.date: 12/18/2020
16
+
ms.date: 02/24/2025
17
17
---
18
18
19
19
# Troubleshoot SIEM tool integration issues
@@ -28,10 +28,7 @@ ms.date: 12/18/2020
28
28
29
29
> [!NOTE]
30
30
> **Try our new APIs using MS Graph security API**. Find out more at: [Use the Microsoft Graph security API - Microsoft Graph | Microsoft Learn](/graph/api/resources/security-api-overview).
31
-
32
-
> Want to experience Defender for Endpoint? [Sign up for a free trial.](https://go.microsoft.com/fwlink/p/?linkid=2225630)
33
-
34
-
> [!NOTE]
31
+
>
35
32
> The new Microsoft Defender XDR alerts API, released to public preview in MS Graph, is the official and recommended API for customers migrating from the SIEM API. See [Migrate from the MDE SIEM API to the Microsoft Defender XDR alerts API](configure-siem.md).
36
33
37
34
You might need to troubleshoot issues while pulling detections in your SIEM tools.
Copy file name to clipboardExpand all lines: defender-endpoint/troubleshooting-mode-scenarios.md
+1-3Lines changed: 1 addition & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,7 +15,7 @@ ms.collection:
15
15
- mde-ngp
16
16
ms.topic: conceptual
17
17
ms.subservice: ngp
18
-
ms.date: 01/09/2025
18
+
ms.date: 02/24/2025
19
19
---
20
20
21
21
# Troubleshooting mode scenarios in Microsoft Defender for Endpoint
@@ -26,8 +26,6 @@ ms.date: 01/09/2025
26
26
-[Microsoft Defender for Endpoint Plan 1](microsoft-defender-endpoint.md)
27
27
-[Microsoft Defender for Endpoint Plan 2](microsoft-defender-endpoint.md)
28
28
29
-
> Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/WindowsForBusiness/windows-atp?ocid=docs-wdatp-configureendpointsscript-abovefoldlink)
30
-
31
29
Microsoft Defender for Endpoint troubleshooting mode allows you to troubleshoot various Microsoft Defender Antivirus features by enabling them from the device and testing different scenarios, even if they're controlled by the organization policy. The troubleshooting mode is disabled by default and requires you to turn it on for a device (and/or group of devices) for a limited time. This is exclusively an enterprise-only feature, and requires Microsoft Defender XDR access.
32
30
33
31
For troubleshooting performance-specific issues related to Microsoft Defender Antivirus, see: [Performance analyzer for Microsoft Defender Antivirus](tune-performance-defender-antivirus.md).
0 commit comments