Forum Discussion
Missing features in Security portal
With the Azure ATP portal we where able to do a lot more of investigation for on premises actions. We are in a large hybrid environment.
Is there a way to access the old portal to get back that timeline for a user?
The things we are missing out on currently that we found are the following:
Password resets, where able to see that easy at the users timeline.
Users being added to or removed from groups and who did it
Failed logins to on premises resources
You can no longer search for groups
Can't export the same data as in the ATP portal.
Some of us used this daily and are having trouble to figure out how to get the correct information now.
I'm aware that we can see some of those things in the users audit logs for example but would be nice to be able to see it in the timeline as before.
- We are working on the missing functionality you mentioned above. The information is available in the new User timeline in M365D portal, and we are working on a few improvements such as the ability to export data and to filter by a specific activity.
You can still use the classic portal. Here you can see more details about redirection: https://learn.microsoft.com/en-us/microsoft-365/security/defender/microsoft-365-security-mdi-redirection?view=o365-worldwide&branch=pr-en-us-18255#can-i-go-back-to-using-the-former-portal
3 Replies
- I echo this concern as well - having all the regular activities made available in the Defender portal is essential.
- LiorShapira
Microsoft
We are working on the missing functionality you mentioned above. The information is available in the new User timeline in M365D portal, and we are working on a few improvements such as the ability to export data and to filter by a specific activity.
You can still use the classic portal. Here you can see more details about redirection: https://learn.microsoft.com/en-us/microsoft-365/security/defender/microsoft-365-security-mdi-redirection?view=o365-worldwide&branch=pr-en-us-18255#can-i-go-back-to-using-the-former-portalThank you for the reply LiorShapira
We now went back to the old portal as for now. No other form of contact with Microsoft have mentioned that we could disable the redirect so thank you again.
Looking forward for the new portal when the missing features are available.
