118 questions with Microsoft Defender for Cloud Apps-related tags
Onboarding devices to Microsoft Defender for endpoint
Hi team, Could you please send me steps on how to manage security settings through Defender for endpoint. Also, we don't want to enroll devices to intune, we just want to manage them through Defender. Thank you for your help.
400 Bad request
Error running command synapse.createNotebook: HTTP Error Response: 400 Bad Request. This is likely caused by the extension that contributes synapse.createNotebook.
![](https://techprofile.blob.core.windows.net/images/JkSyH7PnaUmSaYaWudpvWA.png?8DB9A3)
What is included in MS Defender for business ?
What is included in MS Defender for Business ? I read the doc but not able to get it. I get that it contains Defender for Endpoint but boes it contain Defender for Office 365? Defender for Office 365 ? Identity ? or parts of it ?
Onboarding devices on Microsoft 365 Defender remotely
Hello, I have a question regarding onboarding devices on Microsoft 365 Defender. I was wondering if I could onboard computers in my domain remotely by a local script using PowerShell or PsTools without logging in User's computer? Thank you for…
![](https://techprofile.blob.core.windows.net/images/MaWc65HKB0ym-ksoIgz1eQ.png?8DBD84)
![](https://techprofile.blob.core.windows.net/images/MaWc65HKB0ym-ksoIgz1eQ.png?8DBD84)
How Defender EASM found open port 500 on my IP address, and using Nmap scanner I didn't find that the port is open?
I'm using defender currently on a 30 day trial, I'm wondering how Defender EASM managed to find open port 500. I've used Nmap scanner with different switches and tried to scan port 500 directly but I got no result that the port is open. Now I don't know…
How to block Save As option in Microsoft 365
I can restrict document downloads in Microsoft 365 applications with Microsoft Defender for Cloud Apps. However, when I open a document with a client, the Save As option is enabled. How can I prevent this action?
![](https://techprofile.blob.core.windows.net/images/f464fabb-a81f-4ab0-b64d-8d3e8fea3b5a_me.jpg)
Mac OS accessing restricted application
Hey team, We have setup a policy to allow devices to access some applications and sites but we noticed that MAC OS users are now able to access restricted and unrestricted applications and sites. Can you please provide us with steps to prevent Mac users…
Cannot turn feature on. This feature requires an Office 365 E5 license or the Threat Intelligence add-on for Office 365.
I already have M365 E5 license. Do we require 1 threat intelligence license for everyone in the company or how does it work?
![](https://techprofile.blob.core.windows.net/images/zTqI6NuVKE6bX5d_CACSsQ.png?8DB8E8)
Can the defender for identity sensor be installed on normal vms being used for DBs and Apps? because we fully cloud based and have no on prem domain controllers
Improvement Action: Start your Defender for Identity deployment, installing Sensors on Domain Controllers and other eligible servers. We need to establish if we can utilize this service on normal VMs and if there is any benefit of it?
Prevent access to personal accounts from Office 365
Hello, I have been given the task of researching and implementing restrictions within our organization, specifically regarding user access to personal accounts and services from within the Office 365 app suite. For example, by default, there appears to…
I want to know the policy of Microsoft Defender for Cloud App
I want to know if the policy of Microsoft Defender for Cloud App 'Ransomware activity,' includes the condition of detecting the file named 'HELP_DECRYPT.URL' as a normal file but still triggers an alert.
Teams account sign in error
Teams sign in error We can't sign in this account (yymyint@xxx.com) in Mobile version. It shows like this image error. Pls tell me how to solve that error. Kindly reply to me. Thanks.
Onboarding multiple devices by local script
Hello Microsoft, I have a question regarding onboarding devices on Microsoft 365 Defender. I was wondering if I could onboard multiple devices in a domain by a local script (more than 10 devices) !? Thank you for responding*
![](https://techprofile.blob.core.windows.net/images/MaWc65HKB0ym-ksoIgz1eQ.png?8DBD84)
![](https://techprofile.blob.core.windows.net/images/MaWc65HKB0ym-ksoIgz1eQ.png?8DBD84)
How do I export a list of Analytics from the Defender Products
As a MSSP for Microsoft Sentinel we have the Defender MDO Data connectors enabled and we're creating Incidents based on the Alerts that are created from each of the different MDO's Defender for Identity Defender for Office 365 Defender for Endpoint …
How to prevent users to grant consent on third party apps which are using OAuth which is token based authentication and authorization?
How to prevent users to grant consent on third party apps which are using OAuth which is token based authentication and authorization? As we have seen many users are using their work account to grant on different apps to use those and seems those apps…
![](https://techprofile.blob.core.windows.net/images/PT7QlfEdr0qdUKsDf1u5tw.png?8D801B)
Prevent a user from trigerring the same cloud app policy multiple times
Hello, I have a policy that triggers when a user fails to connect 100 times in 60 minutes. The main use of this policy is to notify our security team when a user is likely to be under attack so that they can contact the user to establish a strong…
defender & intune-restrict access to a website based on device risk level
Hi all, is it possible to restrict access to a public website based on a risk level calculated by defender? Lets say that if a device has HIGH risk level, it will not be allowed to access particular web site.... PS: We use M365 E3 with M365 E5 Security…
![](https://techprofile.blob.core.windows.net/images/PT7QlfEdr0qdUKsDf1u5tw.png?8D801B)
MDE_365 _Integration with SIEM(ArcSight)
Hi All, In my environment ,we have integrated Microsoft 365 defender (mde) -EDR with ArcSight ,in our case we receive only Alerts and Incidents events only in our ArcSight logs .which is creating more noise and we are not able to create any rule in…
Azure License Allocation
Hi everyone, I am just getting started in azure which has lead me to a very junior license question. I have noticed we have a few licenses in our managed azure tenant which are not assigned. Licenses include: Microsoft Defender for Cloud Apps Microsoft…
What all are the capabilities of Microsoft Cloud app security in terms of monitoring the M365 apps?
What all are the capabilities of Microsoft Cloud app security in terms of monitoring the M365 apps? Also need help on below query. As I have implemented it in our tenant and it shows below on each apps for end users but how we can silently disable that…