Skip to content

troubleshoot-mdatp.md

Latest commit

 

History

History
84 lines (53 loc) · 3.17 KB

troubleshoot-mdatp.md

File metadata and controls

84 lines (53 loc) · 3.17 KB

title: Troubleshoot Microsoft Defender for Endpoint service issues description: Find solutions and workarounds to known issues such as server errors when trying to access the service. ms.service: defender-endpoint ms.subservice: onboard ms.author: chrisda author: chrisda ms.localizationpriority: medium manager: bagol audience: ITPro ms.collection:

  • m365-security
  • tier3 ms.topic: troubleshooting search.appverid: met150 ms.date: 02/24/2025 appliesto:
    • Microsoft Defender for Endpoint Plan 1
    • Microsoft Defender for Endpoint Plan 2

Troubleshoot service issues

This section addresses issues that might arise as you use the Microsoft Defender for Endpoint service.

Server error - Access is denied due to invalid credentials

If you encounter a server error when trying to access the service, you need to change your browser cookie settings. Configure your browser to allow cookies.

Elements or data missing on the portal

If some elements or data is missing on Microsoft Defender XDR, it's possible that proxy settings are blocking it.

Make sure that *.security.microsoft.com is included in the proxy allow list.

Note

You must use the HTTPS protocol when adding the following endpoints.

Microsoft Defender for Endpoint service shows event or error logs in the Event Viewer

See Review events and errors using Event Viewer for a list of event IDs that are reported by the Microsoft Defender for Endpoint service. The article also contains troubleshooting steps for event errors.

Microsoft Defender for Endpoint service fails to start after a reboot and shows error 577

If onboarding devices successfully completes, but Microsoft Defender for Endpoint doesn't start after a reboot and shows error 577, check that Windows Defender isn't disabled by a policy.

For more information, see Ensure that Microsoft Defender Antivirus isn't disabled by policy.

Known issues with regional formats

Date and time formats

There are some known issues with the time and date formats.

The following date formats are supported:

  • MM/dd/yyyy
  • dd/MM/yyyy

The following date and time formats are currently not supported:

  • Date format yyyy/MM/dd
  • Date format dd/MM/yy
  • Date format with yy. Only shows yyyy.
  • Time format HH:mm:ss isn't supported (the 12 hour AM/PM format isn't supported). Only the 24-hour format is supported.

Use of comma to indicate thousand

Support of use of comma as a separator in numbers aren't supported. Regions where a number is separated with a comma to indicate a thousand, will only see the use of a dot as a separator. For example, 15,5 K is displayed as 15.5 K.

Microsoft Defender for Endpoint tenant was automatically created in Europe

When you use Microsoft Defender for Cloud to monitor servers, a Microsoft Defender for Endpoint tenant is automatically created. The Microsoft Defender for Endpoint data is stored in Europe by default.

Related content