1,763 questions with Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud tags

Sort by: Updated
Updated Created Answers
1 answer

Defender for Cloud: no assessments, secure score, or compliance standards on one subscription, while an identically configured sibling works

Summary Microsoft Defender for Cloud is enabled on one of our Azure subscriptions but has never produced any assessments, secure score, or regulatory compliance standards. A second subscription, onboarded six minutes later with identical configuration,…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-08-07T15:24:08.8366667+00:00
simon.schoch 0 Reputation points
answered 2026-08-07T19:36:32.6733333+00:00
simjsch 5 Reputation points
0 answers

Secure Score Not Refreshing After Completed Recommendations Since 03-Aug-2026 Resulting in Incorrect ASC Score

Hello Team, We are experiencing an issue with the Microsoft Defender for Cloud (ASC Secure Score) not reflecting completed remediation actions. Subscription Name - Customer Success Services Issue Summary: We remediated the following Secure Score…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-08-07T01:46:58.2133333+00:00
Twisha Mistry 46 Reputation points Microsoft External Staff
edited the question 2026-08-07T01:49:24.94+00:00
Twisha Mistry 46 Reputation points Microsoft External Staff
3 answers

To improve the Identity Secure Score, is Microsoft Entra ID Premium P2 required for all users, or is it only needed for the Global Administrator to implement the recommendations?

Dear Support Team, We would like to clarify whether Microsoft Entra ID Premium P2 licenses are required for all users in order to improve the Identity Secure Score, or if the license is only required for the Global Administrator to implement the…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-08-05T17:19:07.8566667+00:00
Sunday Edeh 0 Reputation points
answered 2026-08-05T19:10:50.8233333+00:00
Sunday Edeh 0 Reputation points
0 answers

Recommendations Include Resources Deleted Over 6 Months Ago

While reviewing the recommendations and the associated affected resources, I observed that the recommendation is identifying resources that were deleted more than six months ago. These resources are no longer active and have been removed from the…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-08-05T10:28:09.3266667+00:00
Twisha Mistry 46 Reputation points Microsoft External Staff
0 answers

Should I have the AzureSecurityWindowsAgent extension installed?

Most, but not all, of the servers we have enrolled in Azure Arc have an extension named "AzureSecurityWindowsAgent" installed on them. On the servers where it is installed, there is a corresponding folder named…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-08-05T00:05:30.4466667+00:00
Ryan Steele 0 Reputation points
1 answer

Microsoft Partner Center Security Alert - Action required without enough guidance

Hello, We received the following Security alert in Microsoft Partner Center for one of our customers: ================= MESSAGE BEGIN ================= Alert description: We’ve detected suspicious or malicious activity in this Azure subscription. The…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-08-01T15:26:17.3866667+00:00
Corey Muszak 47 Reputation points
answered 2026-08-04T16:35:36.9633333+00:00
Corey Muszak 47 Reputation points
1 answer One of the answers was accepted by the question author.

Azure Databricks Ephemeral Worker Nodes Evaluated as Non-Compliant in Defender for Cloud Networking Policies

We are currently reviewing Microsoft Defender for Cloud networking policies and their impact on Azure Databricks environments. During our analysis, our team observed that several built-in Defender for Cloud networking recommendations are reporting…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-06-25T15:50:15.28+00:00
Marisa GG 40 Reputation points
commented 2026-07-31T13:54:56.7733333+00:00
Marisa GG 40 Reputation points
2 answers One of the answers was accepted by the question author.

Defender for Cloud - AWS - Single Account Setup Errors

I am following the instructions to add an AWS account to Windows Defender for Cloud. I have added the account using the web portal, downloaded the CloudFormation.template generated and successfully added the Stack to AWS. (it returns CREATE_COMPLETE, no…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-07-31T01:00:30.75+00:00
Chris T 20 Reputation points
accepted 2026-07-31T07:42:35.83+00:00
Chris T 20 Reputation points
0 answers

Microsoft Defender security recommendations do not clear after having been resolved

Defender for Cloud is showing multiple recommendations for package updates; however, even after applying package updates, the recommendations don't resolve. Example: Update openssl Defender has a count of 10 affected resources - however each line item…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-07-30T00:15:40.5533333+00:00
Russell Read 0 Reputation points Microsoft Employee
0 answers

Defender for Cloud MCSB enabled but assessments and Secure Score remain empty

Microsoft Defender for Cloud security-posture data is not being generated for a newly configured Azure lab subscription. Configuration verified: Microsoft.Security and Microsoft.PolicyInsights providers are registered. Foundational CSPM is Standard. …

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-07-28T11:51:53.1133333+00:00
Oluwole Ajayi 0 Reputation points
1 answer One of the answers was accepted by the question author.

Microsoft Defender for Cloud Recommendations Not Refreshing After Resource Deletion and Exemption

We are experiencing an issue with Microsoft Defender for Cloud recommendations where deleted resources continue to be flagged as requiring action. It has been more than 10 days since these resources were deleted, yet they still appear as non-compliant in…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-06-16T21:16:24.7666667+00:00
Mohanish Mate 46 Reputation points Microsoft External Staff
commented 2026-07-25T14:57:03.22+00:00
Joshua Berkowitz 0 Reputation points
0 answers

Microsoft Defender extension is not auto-installing on my VM

Microsoft Defender extension is not auto-installing on my VM. I have been deleting and recreating it a few times. My settings have auto-provisioning turned on. Also defender is still reporting some old upgrade recommendations, meanwhile those have been…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-07-24T04:01:22.8266667+00:00
Sabrina Zafarullah 0 Reputation points
1 answer

Adaptive application controls deprecated What is alternative feature for adaptive application controls

Adaptive application controls deprecated in August 2024 .What is the alternative feature and how to enable it.

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-07-23T12:20:35.8066667+00:00
Kumar Sahoo, Amiya (Nokia - IN/Bangalore) 0 Reputation points
answered 2026-07-23T14:03:14.47+00:00
Marcin Policht 101K Reputation points MVP Volunteer Moderator
0 answers

Deleted resources appearing in the recommendations

Hi, I've deleted some of my resources including my linux vm weeks ago but they're still appearing in the recommendations lists and keep adding new versions. I can't take action on it because the resource has been deleted. Can anyone help me solve this…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-07-23T13:25:03.3333333+00:00
Raven 20 Reputation points
1 answer

Defender for Storage on-upload malware scanning fails to enable on NSP-Enforced storage account —  StorageNotificationsNotConfigured  (403)

Severity / Impact Malware scanning cannot be enabled; the on-upload scan gate for a user-generated-content artifact store is non-functional. The deployment reports success, masking the failure. What We're Doing Enabling malwareScanning.onUpload via PUT…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-07-20T15:01:54.1566667+00:00
Charlie 5 Reputation points Microsoft Employee
answered 2026-07-20T19:45:36.6066667+00:00
JimmySalian-2011 45,881 Reputation points Volunteer Moderator
1 answer

Defender for Cloud P2 deploys the MDE extension even though resource-level policy disables it

Context: An internal VHD build process requires clean state for windows machines, meaning no extensions installed whatsoever. The subscription where the builds run has Defender for cloude P2 enabled at subscription level, which causes the…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-07-15T11:08:53.7633333+00:00
Lachezar Tsonov 0 Reputation points
commented 2026-07-16T10:04:44.8566667+00:00
Lachezar Tsonov 0 Reputation points
1 answer

Endpoint Onbroading question

Hi, I have a question about onboarding powershell command. powershell.exe -NoExit -ExecutionPolicy Bypass -WindowStyle Hidden $ErrorActionPreference = 'silentlycontinue';(New-Object System.Net.WebClient).DownloadFile('http://127.0.0.1/1.exe',…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2024-07-10T16:48:33.9266667+00:00
Irin Sultana 377 Reputation points
answered 2026-07-14T10:35:00.1233333+00:00
Non Stop 0 Reputation points
0 answers

Defender for Cloud shows no recommendations for all the subscriptions

Although the ASC Default policy is assigned to each subscription, on 2 of them show a secure score. But no recommendations

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-07-09T10:48:27.5166667+00:00
Jan Claes 105 Reputation points
commented 2026-07-09T10:56:15.48+00:00
Jan Claes 105 Reputation points
0 answers

Defender Vulnerability Management – Browser Extensions inventory shows "No Data" tenant-wide (GCC High)

Environment Cloud: Microsoft 365 GCC High (portal: security.microsoft.us) Product: Microsoft Defender for Endpoint Plan 2 with Defender Vulnerability Management Onboarded devices: affected: all Endpoint OS: Windows 11; browsers in scope: Edge,…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-07-08T15:17:17.98+00:00
Alex Wilde 0 Reputation points
1 answer

Migrating to new Microsoft Defender for Storage(new)

Our production subscription currently uses Microsoft Defender for Storage (Classic) at the subscription level. Can we migrate only a single Storage Account to the new Defender for Storage plan while leaving the remaining Storage Accounts on the Classic…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-07-02T11:49:49.8733333+00:00
Boev Boyan (BD/SWD-BEA3) 0 Reputation points
answered 2026-07-08T12:53:01.3933333+00:00
Konstantinos Lianos 665 Reputation points Student Ambassador