Forum Discussion
Inconsistent Microsoft Defender Behaviour
Hi everyone, We have an issue whereby across several intune managed devices with identical defender AV policy, signature version, and platform version, we've found inconsistent detection/remediation...
You mentioned that 3rd party AV was causing Defender to go in passive mode initially. Have you verified that after the removal MDE is in active mode? Is the status updated in mppreferences and on the Defender portal? Have you tried running the simulations to verify for the configuration? You can also run mde connect analyzer to ensure that all pre-reqs are met on the devices in question.
Hi rahuljindal​, I can confirm after removing the 3rd party AV, it's no longer showing when checking the status. I haven't tried either of your following suggestions but will do