SOLVED

Microsoft Defender ATP in Endpoint Security- Unavailable

%3CLINGO-SUB%20id%3D%22lingo-sub-1010801%22%20slang%3D%22en-US%22%3EMicrosoft%20Defender%20ATP%20in%20Endpoint%20Security-%20Unavailable%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1010801%22%20slang%3D%22en-US%22%3E%3CP%3EHello%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOn%20my%20Endpoint%20Security%20window%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdevicemanagement.microsoft.com%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdevicemanagement.microsoft.com%2F%3C%2FA%3E%26nbsp%3Bon%20Microsoft%20Defender%20ATP%2C%20the%20connection%20status%20is%20%22unavailable%22.%20I%20checked%20defender%20ATP%20intune%20settings%20under%20securitycenter.windows.com%20and%20it%20is%20turned%20on%20already.%20Tried%20turning%20it%20off%20and%20on%20again%20after%20few%20minutes%20waiting%2C%20but%20the%20status%20is%20still%20the%20same.%20Has%20anyone%20come%20across%20such%20issues%20and%20found%20a%20fix%20for%20this%3F%3C%2FP%3E%3CP%3EMy%20main%20concern%20is%20about%20applying%20the%20security%20baseline%20for%20defender%20ATP%20is%20not%20applying%20to%20any%20onboarded%20machine.%20My%20assumption%20is%20it%20is%20not%20happening%20due%20to%20the%20connectivity%20issues%20between%20defender%20ATP%20and%20intune.%20Please%20help%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F157358iBB21DAE42C970E0C%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22clipboard_image_0.png%22%20title%3D%22clipboard_image_0.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1010949%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Defender%20ATP%20in%20Endpoint%20Security-%20Unavailable%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1010949%22%20slang%3D%22en-US%22%3E%3CP%3ELooks%20like%20I%20found%20the%20fix!%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20disabled%20the%20Intune%20connection%20from%20Defender%20ATP%20admin%20center%20(securitycenter.windows.com)%20and%20waited%20for%20some%20time.%20Then%20went%20back%20to%20Endpoint%20security%20and%20clicked%20on%20Microsoft%20Defender%20ATP%20option.%20From%20there%2C%20I%20could%20see%20an%20option%20to%20delete%20the%20connector%20now%20and%20I%20deleted.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20666px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F157364i9B4E546A22D9C39B%2Fimage-dimensions%2F666x228%3Fv%3D1.0%22%20width%3D%22666%22%20height%3D%22228%22%20alt%3D%22clipboard_image_1.png%22%20title%3D%22clipboard_image_1.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThen%20went%20back%20to%20security%20center%20and%20enabled%20intune%20again.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBack%20in%20Endpoint%20security%2C%20I%20was%20now%20able%20to%20set%20the%20connection%20again%2C%20and%20enable%20it.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F157365i9CAF518102DFACA7%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22clipboard_image_2.png%22%20title%3D%22clipboard_image_2.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F157366i4E50B7937A554A3D%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22clipboard_image_3.png%22%20title%3D%22clipboard_image_3.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Frequent Contributor

Hello

 

On my Endpoint Security window https://devicemanagement.microsoft.com/ on Microsoft Defender ATP, the connection status is "unavailable". I checked defender ATP intune settings under securitycenter.windows.com and it is turned on already. Tried turning it off and on again after few minutes waiting, but the status is still the same. Has anyone come across such issues and found a fix for this?

My main concern is about applying the security baseline for defender ATP is not applying to any onboarded machine. My assumption is it is not happening due to the connectivity issues between defender ATP and intune. Please help

 

clipboard_image_0.png

1 Reply
best response confirmed by Ambarish RH (Frequent Contributor)
Solution

Looks like I found the fix! :)

 

I disabled the Intune connection from Defender ATP admin center (securitycenter.windows.com) and waited for some time. Then went back to Endpoint security and clicked on Microsoft Defender ATP option. From there, I could see an option to delete the connector now and I deleted.

clipboard_image_1.png

 

Then went back to security center and enabled intune again.

 

Back in Endpoint security, I was now able to set the connection again, and enable it.

clipboard_image_2.png

 

clipboard_image_3.png