Forum Discussion

se4ga's avatar
se4ga
Copper Contributor
Nov 13, 2023

Troubleshooting mode on device without newtork

Dear Forum-members,

 

How to Activate troubleshooting mode on Defender when the device is not connected to the network (and portal, as well) if tamper protection was enabled globally via Intune or Defender portal?

 

Thank you in advance.

 

Best regards,
Sergey Shalkov

2 Replies

  • Your device should be active (connected to M365 Defender portal) to receive the "troubleshooting mode" command from M365 Defender portal. you can turn off tamper protection (if required) from device after troubleshooting mode is enabled using the PowerShell command Set-MPPreference -DisableTamperProtection $true. All security setting changes made during troubleshooting mode will revert back to original state after 4 hours.
    • se4ga's avatar
      se4ga
      Copper Contributor

      mohamedalishahul thanks for your response. I agree and I saw the MS requirements.

      And what if the device does not have network access now? Any way to disable Tamper protection in that case? Such a scenario still could happen nowadays. 

Resources