Forum Discussion
Newly Created DfE Device Groups not immediately usable
I created a device group via https://security.microsoft.com/securitysettings/endpoints/machine_groups to apply a custom Indicator URL block for a single device based on an exact device name match. I ensured that the device is matched with the group rule using the Preview Device feature. Immediately after creating the device group, I clicked on Apply Changes on the device group page but after an hour, the device group still shows 0 device members and is not yet visible when creating the custom TI URL rule.
It's extremely frustrating when we need to respond quickly to threats but have to wait for back-end replication/scripts to run just for creating and using a Defender device group.
7 Replies
The group finally was visible and useable after 2 hours of just...waiting. Now, 6 hours later, the device count for the group is still showing as 0 while the preview devices page still matches the rules against a single device. Really not a great user experience.
Means asset group is not assigned, can you share a screenshot
