Forum Discussion
Marc_Laf
Sep 20, 2023Iron Contributor
Devices are not showing logged on users
The environment is hybrid with devices being managed by Intune. We are also using Microsoft Defender for Business so maybe that's why this feature isn't working. On Settings > Endpoints > Adv...
- Nov 02, 2023Sure enough, another little thing to keep us down.
Their reply:
"I have noticed that you are currently having Defender for Business. Defender for Business will not let you see the currently logged-on user of a device, can't see device groups, and detection rules. This is the reason why you are not seeing currently logged in users. "
The logged on user shows in Intune. Why they can't show it in Defender is just stupid games. I asked for the documentation explicitly stating this limitation.
Marc_Laf
Iron Contributor
Hey MikeSlates , sorry no I did not. If I ever do I'll try to remember to update this thread.
MikeSlates
Oct 30, 2023Brass Contributor
I opened a Service Request with Microsoft. We'll see.
They always try to prune things down with Def for Business.
Or they'll say "this is part of Def for Identity".
Ridiculous...
They always try to prune things down with Def for Business.
Or they'll say "this is part of Def for Identity".
Ridiculous...
- Marc_LafOct 30, 2023Iron ContributorOh I have also recently discovered that there's a difference between them. I thought that because it included things from P1 and P2 then it would naturally act like P1 and P2 but nope! Yeah I really dislike how they treat it like something totally different.
- MikeSlatesNov 02, 2023Brass ContributorSure enough, another little thing to keep us down.
Their reply:
"I have noticed that you are currently having Defender for Business. Defender for Business will not let you see the currently logged-on user of a device, can't see device groups, and detection rules. This is the reason why you are not seeing currently logged in users. "
The logged on user shows in Intune. Why they can't show it in Defender is just stupid games. I asked for the documentation explicitly stating this limitation.- Marc_LafNov 02, 2023Iron ContributorWow that’s quite annoying! Really appreciate you posting the reason. I’m starting to feel pretty **bleep** because I was the one pushing to drop our existing platform and move to Defender because it was included with our M365 BP licenses and that it was basically P1 and parts of P2. I really wish more of these limitations were clearly stated. Their “what’s in DfB” chart that highlights parts of P1 and P2 needs to specify that just because all of the P1 features are includes, it’s NOT DfE P1. Sigh.