Skip to content

Commit 9f4c14e

Browse files
authored
Merge pull request #2912 from MicrosoftDocs/mde-trial
Update configure-machines-onboarding.md
2 parents 8765e4e + 65800c1 commit 9f4c14e

9 files changed

+19
-33
lines changed

defender-endpoint/configure-machines-onboarding.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ ms.date: 12/18/2023
2525
- [Microsoft Defender for Endpoint Plan 2](microsoft-defender-endpoint.md)
2626
- [Microsoft Defender XDR](/defender-xdr)
2727

28-
> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://signup.microsoft.com/create-account/signup?products=7f379fee-c4f9-4278-b0a1-e4c8c2fcdf7e&ru=https://aka.ms/MDEp2OpenTrial?ocid=docs-wdatp-onboardconfigure-abovefoldlink)
28+
> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://go.microsoft.com/fwlink/p/?linkid=2225630&clcid=0x409&culture=en-us&country=us)
2929
3030
Each onboarded device adds an additional endpoint detection and response (EDR) sensor and increases visibility over breach activity in your network. Onboarding also ensures that a device can be checked for vulnerable components as well security configuration issues and can receive critical remediation actions during attacks.
3131

defender-endpoint/mac-troubleshoot-mode.md

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.collection:
1515
ms.topic: conceptual
1616
ms.subservice: macos
1717
search.appverid: met150
18-
ms.date: 02/06/2024
18+
ms.date: 02/24/2025
1919
---
2020

2121
# Troubleshooting mode in Microsoft Defender for Endpoint on macOS
@@ -29,8 +29,6 @@ ms.date: 02/06/2024
2929
- [Microsoft Defender for Endpoint Plan 1](microsoft-defender-endpoint.md)
3030
- [Microsoft Defender for Endpoint on macOS](microsoft-defender-endpoint-mac.md)
3131

32-
> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://go.microsoft.com/fwlink/p/?linkid=2225630&clcid=0x409&culture=en-us&country=us)
33-
3432
This article describes how to enable the troubleshooting mode in Microsoft Defender for Endpoint on macOS so admins can troubleshoot various Microsoft Defender Antivirus features temporarily, even if organizational policies manage the devices.
3533

3634
For example, if the tamper protection is enabled, certain settings can't be modified or turned off, but you can use troubleshooting mode on the device to edit those settings temporarily.

defender-endpoint/mac-troubleshoot-netext-mde.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.collection:
1515
ms.topic: conceptual
1616
ms.subservice: macos
1717
search.appverid: met150
18-
ms.date: 09/20/2024
18+
ms.date: 02/24/2025
1919
---
2020

2121
# Troubleshoot Network Extension (NetExt) issues in Defender for Endpoint on Mac
@@ -49,7 +49,9 @@ This article describes how to temporarily disable NetExt which will temporarily
4949
At a high level, these are the steps to follow for [Intune](#intune-method) and [JamF](#jamf-method):
5050

5151
1. Create a new "Devices with NetExt disabled" group.
52+
5253
2. Exclude that group from the existing NetExt configuration.
54+
5355
3. Assign the existing configuration to the "Devices with NetExt disabled" device group.
5456

5557
The following sections describe these steps in more detail.

defender-endpoint/troubleshoot-asr.md

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.localizationpriority: medium
66
audience: ITPro
77
author: denisebmsft
88
ms.author: deniseb
9-
ms.date: 01/10/2025
9+
ms.date: 02/24/2025
1010
ms.reviewer:
1111
manager: deniseb
1212
ms.custom: asr
@@ -23,7 +23,6 @@ search.appverid: met150
2323

2424
[!INCLUDE [Microsoft Defender XDR rebranding](../includes/microsoft-defender.md)]
2525

26-
2726
**Applies to:**
2827

2928
- [Microsoft Defender for Endpoint Plan 1 and 2](microsoft-defender-endpoint.md)

defender-endpoint/troubleshoot-mdatp.md

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ ms.collection:
1313
- tier3
1414
ms.topic: troubleshooting
1515
search.appverid: met150
16-
ms.date: 12/18/2020
16+
ms.date: 02/24/2025
1717
---
1818

1919
# Troubleshoot service issues
@@ -25,8 +25,6 @@ ms.date: 12/18/2020
2525
- [Microsoft Defender for Endpoint Plan 2](microsoft-defender-endpoint.md)
2626
- [Microsoft Defender XDR](/defender-xdr)
2727

28-
> Want to experience Defender for Endpoint? [Sign up for a free trial.](https://go.microsoft.com/fwlink/p/?linkid=2225630)
29-
3028
This section addresses issues that might arise as you use the Microsoft Defender for Endpoint service.
3129

3230
## Server error - Access is denied due to invalid credentials

defender-endpoint/troubleshoot-np.md

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.collection:
1515
- tier3
1616
- mde-asr
1717
search.appverid: met150
18-
ms.date: 03/03/2024
18+
ms.date: 02/24/2025
1919
---
2020

2121
# Troubleshoot network protection
@@ -28,9 +28,6 @@ ms.date: 03/03/2024
2828
- [Microsoft Defender for Business](https://www.microsoft.com/security/business/endpoint-security/microsoft-defender-business?branch=main)
2929
- [Microsoft Defender for Endpoint Plan 1](microsoft-defender-endpoint.md)
3030

31-
> [!TIP]
32-
> Want to experience Defender for Endpoint? [Sign up for a free trial.](https://go.microsoft.com/fwlink/p/?linkid=2225630)
33-
3431
This article provides troubleshooting information for [network protection](network-protection.md), in cases, such as:
3532

3633
- Network protection blocks a website that is safe (false positive)

defender-endpoint/troubleshoot-onboarding-error-messages.md

Lines changed: 8 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -26,15 +26,13 @@ ms.date: 07/18/2024
2626
- [Microsoft Defender for Endpoint Plan 2](microsoft-defender-endpoint.md)
2727
- [Microsoft Defender XDR](/defender-xdr)
2828

29-
> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://signup.microsoft.com/create-account/signup?products=7f379fee-c4f9-4278-b0a1-e4c8c2fcdf7e&ru=https://aka.ms/MDEp2OpenTrial?ocid=docs-wdatp-troublshootonboarding-abovefoldlink)
30-
3129
This page provides detailed steps to troubleshoot issues that might occur when setting up your Microsoft Defender for Endpoint service.
3230

33-
If you receive an error message, Microsoft Defender XDR will provide a detailed explanation on what the issue is and relevant links will be supplied.
31+
If you receive an error message, Microsoft Defender XDR provides a detailed explanation on what the issue is and relevant links are supplied.
3432

3533
## No subscriptions found
3634

37-
If while accessing Microsoft Defender XDR you get a **No subscriptions found** message, it means the Microsoft Entra ID used to log in the user to the portal, does not have a Microsoft Defender for Endpoint license.
35+
If, while you're accessing Microsoft Defender XDR, you get an error message that says, "No subscriptions found," it means that the Microsoft Entra ID used to sign into the Microsoft Defender portal doesn't have a license for Defender for Endpoint.
3836

3937
Potential reasons:
4038

@@ -52,31 +50,30 @@ For both cases, you should contact Microsoft support at [General Microsoft Defen
5250

5351
If while accessing Microsoft Defender XDR you get a **Your subscription has expired** message, your online service subscription has expired. Microsoft Defender for Endpoint subscription, like any other online service subscription, has an expiration date.
5452

55-
You can choose to renew or extend the license at any point in time. When accessing the portal after the expiration date a **Your subscription has expired** message will be presented with an option to download the device offboarding package, should you choose to not renew the license.
53+
You can choose to renew or extend the license at any point in time. When accessing the portal after the expiration date, a message appears that says, "Your subscription has expired." The message includes an option to download the device offboarding package, just in case you choose to not renew your subscription.
5654

5755
> [!NOTE]
58-
> For security reasons, the package used to Offboard devices will expire 7 days after the date it was downloaded. Expired offboarding packages sent to a device will be rejected. When downloading an offboarding package you will be notified of the packages expiry date and it will also be included in the package name.
56+
> For security reasons, the package used to Offboard devices will expire seven days after the date it was downloaded. Expired offboarding packages sent to a device are rejected. When downloading an offboarding package, you're notified of the package's expiry date and it is also included in the package name.
5957
6058
:::image type="content" source="media/atp-subscription-expired.png" alt-text="The subscription expired notification message" lightbox="media/atp-subscription-expired.png":::
6159

6260
## You are not authorized to access the portal
6361

64-
If you receive a **You are not authorized to access the portal**, be aware that Microsoft Defender for Endpoint is a security monitoring, incident investigation and response product, and as such, access to it is restricted and controlled by the user.
65-
For more information, see, [**Assign user access to the portal**](/windows/threat-protection/windows-defender-atp/assign-portal-access-windows-defender-advanced-threat-protection).
62+
If you receive a message that says, "You are not authorized to access the portal," it's most likely because you haven't been granted access to the Microsoft Defender portal. Defender for Endpoint is a security monitoring, incident investigation and response product, and as such, access to it's restricted and controlled by your organization's security team. For more information, see, [**Assign user access to the portal**](/windows/threat-protection/windows-defender-atp/assign-portal-access-windows-defender-advanced-threat-protection).
6663

6764
:::image type="content" source="media/atp-not-authorized-to-access-portal.png" alt-text="The access disallowed notification message" lightbox="media/atp-not-authorized-to-access-portal.png":::
6865

6966
## Data currently isn't available on some sections of the portal
7067

71-
If the portal dashboard and other sections show an error message such as "Data currently isn't available":
68+
If the portal dashboard and other sections show an error message, such as "Data currently isn't available," you might need to allow subdomains.
7269

7370
:::image type="content" source="media/atp-data-not-available.png" alt-text="The data unavailability notification message" lightbox="media/atp-data-not-available.png":::
7471

75-
You'll need to allow the `security.windows.com` and all subdomains under it on your web browser. For example, `*.security.windows.com`.
72+
You need to allow the `security.windows.com` and all subdomains under it on your web browser. For example, `*.security.windows.com`.
7673

7774
## Portal communication issues
7875

79-
If you encounter issues with accessing the portal, missing data, or restricted access to portions of the portal, you'll need to verify that the following URLs are accessible through the browser for authorized users:
76+
If you encounter issues with accessing the portal, missing data, or restricted access to portions of the portal, you need to verify that the following URLs are accessible through the browser for authorized users:
8077

8178
- `*.blob.core.windows.net`
8279
- `crl.microsoft.com`

defender-endpoint/troubleshoot-siem.md

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ ms.collection:
1313
- tier3
1414
ms.topic: troubleshooting
1515
search.appverid: met150
16-
ms.date: 12/18/2020
16+
ms.date: 02/24/2025
1717
---
1818

1919
# Troubleshoot SIEM tool integration issues
@@ -28,10 +28,7 @@ ms.date: 12/18/2020
2828

2929
> [!NOTE]
3030
> **Try our new APIs using MS Graph security API**. Find out more at: [Use the Microsoft Graph security API - Microsoft Graph | Microsoft Learn](/graph/api/resources/security-api-overview).
31-
32-
> Want to experience Defender for Endpoint? [Sign up for a free trial.](https://go.microsoft.com/fwlink/p/?linkid=2225630)
33-
34-
> [!NOTE]
31+
>
3532
> The new Microsoft Defender XDR alerts API, released to public preview in MS Graph, is the official and recommended API for customers migrating from the SIEM API. See [Migrate from the MDE SIEM API to the Microsoft Defender XDR alerts API](configure-siem.md).
3633
3734
You might need to troubleshoot issues while pulling detections in your SIEM tools.

defender-endpoint/troubleshooting-mode-scenarios.md

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.collection:
1515
- mde-ngp
1616
ms.topic: conceptual
1717
ms.subservice: ngp
18-
ms.date: 01/09/2025
18+
ms.date: 02/24/2025
1919
---
2020

2121
# Troubleshooting mode scenarios in Microsoft Defender for Endpoint
@@ -26,8 +26,6 @@ ms.date: 01/09/2025
2626
- [Microsoft Defender for Endpoint Plan 1](microsoft-defender-endpoint.md)
2727
- [Microsoft Defender for Endpoint Plan 2](microsoft-defender-endpoint.md)
2828

29-
> Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/WindowsForBusiness/windows-atp?ocid=docs-wdatp-configureendpointsscript-abovefoldlink)
30-
3129
Microsoft Defender for Endpoint troubleshooting mode allows you to troubleshoot various Microsoft Defender Antivirus features by enabling them from the device and testing different scenarios, even if they're controlled by the organization policy. The troubleshooting mode is disabled by default and requires you to turn it on for a device (and/or group of devices) for a limited time. This is exclusively an enterprise-only feature, and requires Microsoft Defender XDR access.
3230

3331
For troubleshooting performance-specific issues related to Microsoft Defender Antivirus, see: [Performance analyzer for Microsoft Defender Antivirus](tune-performance-defender-antivirus.md).

0 commit comments

Comments
 (0)