Forum Discussion
Unable to View MDI Alert
Hi all: We recently onboarded our on-prem domain controllers with Defender for Endpoint and installed the Defender for Identity application on each. We received an Identity alert a week ago v...
lloydz Hey - thanks for surfacing that. Just making sure - do you have machine groups set in M365D portal?
If so, we filter these alerts based on the device group settings - you can edit this to include MDI users as well. However, this is not intended, so we are working on removing the MDE device group restriction to MDI alerts.
- We have not created machine groups in the Defender Portal ourselves. There appears to be an "Ungrouped Devices" group that was automatically generated, and that's the only one listed. We're all on-prem and manage Defender through ConfigMgr/SCCM.
