NTP Settings in Defender for Endpoint

[VinodhkumarY]

How to check NTP server settings in Defender for Endpoint

[#2]

Hi @VinodhkumarY,

To check the NTP server settings in Defender for Endpoint, follow these steps:

1. Go to the Microsoft 365 Defender portal and sign in with your work or school account.
2. Click on Settings > Endpoints > Time settings.
3. Under NTP settings, you can see the following information:
   • Primary NTP server: The primary NTP server that the device is using to synchronize its time.
   • Secondary NTP server: The secondary NTP server that the device is using to synchronize its time, if the primary NTP server is unavailable.
   • Polling interval: The frequency at which the device checks the NTP servers for time updates.
   • Time zone: The time zone that the device is using.

You can also check the NTP server settings for a group of devices by following these steps:

1. Go to the Microsoft 365 Defender portal and sign in with your work or school account.
2. Click on Settings > Endpoints > Groups.
3. Select the group of devices that you want to check the NTP server settings for.
4. Click on Edit group.
5. Under Settings, click on Time settings.

This will show you the current NTP server settings for the group of devices, including the primary and secondary NTP servers, the polling interval, and the time zone.

Note: If you are using a managed service provider (MSP) to manage your Defender for Endpoint environment, you may need to contact your MSP to check the NTP server settings for your devices.

Additional tips

• Make sure that the NTP servers that are listed in the settings are valid and accessible.
• Verify that the polling interval is set to an appropriate value. The default polling interval is 64 seconds, but you may need to increase this value if your devices are located in a remote area or have a poor internet connection.
• Check the time zone setting to make sure that it is correct.
• You can also configure custom NTP servers for your devices. To do this, click on the + Add custom NTP server button and enter the IP address or FQDN of the NTP server.

Microsoft 365 Defender time zone settings | Microsoft Learn

Please click Mark as Best Response & Like if my post helped you to solve your issue.
This will help others to find the correct solution easily. It also closes the item.

If the post was useful in other ways, please consider giving it Like.

Kindest regards,

Leon Pavesic
(LinkedIn)