370 questions with Microsoft Security | Microsoft Defender | Microsoft Defender for Identity tags

Sort by: Updated
Updated Created Answers
0 answers

My account has been hacked

My primary Gmail address associated with my Microsoft/OneDrive account was hacked. The attacker accessed my Microsoft account, changed my password, and added their own email address as the primary alias/recovery method. Here is the current…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2026-08-28T03:20:40.3366667+00:00
ethan 0 Reputation points
1 answer

How can I clear the "CONTAINED" status of a user after remediation?

One of our users fell for a ClickFix attack and was automatically set to "CONTAINED" by Defender. We remediated the incident by wiping the client notebook on which the attack happened, verifying that no other systems were affected, and…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2026-07-23T07:46:16.5533333+00:00
Tilman Schmidt 270 Reputation points
commented 2026-08-24T12:12:29.3966667+00:00
Tilman Schmidt 270 Reputation points
1 answer

Fraudulent takeover

I think my computer may have been taken over by a fraudulent agent. She gave her name as Jenna Hall ID 412790 Does she work for Microsoft?

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2026-08-18T22:28:36.02+00:00
Ric Thompson 0 Reputation points
answered 2026-08-18T22:28:47.74+00:00

AI answer

0 answers

Hi Team, We would like to raise a support case for clarification and guidance on the following Microsoft Defender XDR alerts: Alert ID 2845536 – Unfamiliar sign-in properties involving one user Alert ID 2825455 – Possibly compromised service principal acc

Hi Team, We would like to raise a support case for clarification and guidance on the following Microsoft Defender XDR alerts: Alert ID 2845536 – Unfamiliar sign-in properties involving one user Alert ID 2825455 – Possibly compromised service principal…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2026-08-14T10:25:52.2+00:00
Mukherjee Ayantika (Accenture) 0 Reputation points
1 answer

Domain controller showing "Not ready for migration" in Defender for Identity

I want to get the MDI sensor upgraded to v3 on our domain controllers. When I go into Settings > Sensors, two of our DCs are listed as "Ready for migration", but the third says "Not ready for migration". As far as I can tell, this…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2026-07-30T20:55:54.34+00:00
Ryan Steele 0 Reputation points
answered 2026-08-06T16:40:58.7666667+00:00
Ryan Steele 0 Reputation points
0 answers

Unable to complete Azure MFA after changing phone - cannot create or upgrade Azure subscription

Hello, I need help with an issue involving Azure and Microsoft Entra. I have a personal Microsoft account and can successfully sign in to Outlook.com, account.microsoft.com, and the Azure Portal. The problem arises only when I try to create a new Azure…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2026-07-25T09:30:03.43+00:00
Jordi Porto Diaz 0 Reputation points
commented 2026-07-26T05:39:15.69+00:00
Ismail Choyi Kandy (GBJM) 0 Reputation points
2 answers

Stolen account

i swear Microsoft does nothing about stolen accounts (it is a separate email; my older brother's) T-T, my younger brother joined a discord dm because he wanted to play with randoms on bedwars and the guy gave him an "email confirmation" in…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2026-07-08T02:41:37.7766667+00:00
Titus Griffin 0 Reputation points
answered 2026-07-21T00:04:36.7566667+00:00
Debby High 30 Reputation points
1 answer

Endpoint Onbroading question

Hi, I have a question about onboarding powershell command. powershell.exe -NoExit -ExecutionPolicy Bypass -WindowStyle Hidden $ErrorActionPreference = 'silentlycontinue';(New-Object System.Net.WebClient).DownloadFile('http://127.0.0.1/1.exe',…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2024-07-10T16:48:33.9266667+00:00
Irin Sultana 377 Reputation points
answered 2026-07-14T10:35:00.1233333+00:00
Non Stop 0 Reputation points
2 answers

Query about AMC PROD

We have observed multiple sign-in attempts originating from different locations and IP addresses, with the Application Name identified as "AMC PROD." Following these sign-in attempts, the affected user accounts are being flagged as High…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2026-06-25T15:40:55.7+00:00
Saeydul Amin 10 Reputation points
answered 2026-07-14T04:06:59.3766667+00:00
Rohit Panchal 0 Reputation points
2 answers

How could I have had an attacker compromise my AVD session host using admin account whose SID does not match in Entra?

Please pass this incident alert to the Azure team. We have received and incident alert to advise two of our AVDs had a hands on keyboard attack from two admin user accounts but the SID recorded in the alerts are not the same as the SIDs in Entra or…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2026-07-02T22:41:49.73+00:00
Ashley Tym 0 Reputation points
edited an answer 2026-07-03T00:31:21.71+00:00
Ashley Tym 0 Reputation points
2 answers

Defender for Identity licensing

Hello everyone, Hopefully someone can clarify to me Defender for Identity licensing. 90% of our users have E5 license. I want to buy standalone MDI licenses to cover our needs. Questions: Do we need licenses for Service Accounts? Do we need licenses for…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2026-06-13T18:53:40.45+00:00
Łukasz Bielicki 0 Reputation points
answered 2026-06-23T14:21:32.8166667+00:00
Derek Morgan II 80 Reputation points
0 answers

Windows Defender Definition Updates folder taking 256 GB of space and not able to delete the files

Windows Defender Definition Updates folder taking 256 GB of space and no free space left on C drive. Tried deleting the files but not able to do it. We are using Sophos Antivirus.

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2025-02-04T06:36:43.46+00:00
Chintan Shah 0 Reputation points
commented 2026-06-21T21:25:18.78+00:00
Dez Wiebe 0 Reputation points
1 answer

how to reactivate my window security settings

i tried installing a third party app so i turned of and dismissed some of the setting but wasnt able to install it so i deleted it and restarted my pc when i tried turning them back on and my window security page is just showing blank

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2026-06-06T10:27:02.18+00:00
i am special 0 Reputation points
answered 2026-06-06T10:27:16.3766667+00:00

AI answer

2 answers

How to identify a valid MS agent trying to download Ultrviewer

My Surface suddenly gave an alert that my computer may be comprised and gave a number to call - 855-8496582. The person who answered claimed to be a MS employee - Jason White ID MS21672 - and wanted me to download an app - Ultraviewer - in order to see…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2026-04-06T17:49:44.1833333+00:00
Cindy Martin 0 Reputation points
commented 2026-06-04T15:27:22.4133333+00:00
Pauline Mbabu 1,840 Reputation points Microsoft Employee
2 answers

Windows defender hacking support by microsoft engineers

My dell laptop was hacked this morning and it locked my computer. My screen showed a phone number for Windows defender 833-926-2515. I called that number which at some point made me wonder if I was talking to hackers. The people I talked with said…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2026-04-03T19:31:55.8633333+00:00
Anju Joglekar 0 Reputation points
answered 2026-06-04T15:10:00.6733333+00:00
Pauline Mbabu 1,840 Reputation points Microsoft Employee
1 answer One of the answers was accepted by the question author.

mrt asked to get my Microsoft edge username and password whilst a full scan was happening

I was doing virus scans on my pc when all of a sudden I get a pop up from Norton that says 'MRT.exe is trying to get your Microsoft edge username and password' as soon as I seen it I pressed block. I know it wasn't a fake pop up and the results after the…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2025-12-08T21:41:10.9533333+00:00
Balyrt H 20 Reputation points
commented 2026-05-12T20:37:17.5766667+00:00
Balyrt H 20 Reputation points
2 answers

Microsoft Entra Id Protection Weekly Digest

Microsoft Entra Id Protection Weekly Digest identified risky sign-ins, but no risky sign-ins are presented in the reports.

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2026-05-12T13:06:55.7033333+00:00
Steve Bernier 0 Reputation points
answered 2026-05-12T17:36:50.7866667+00:00
Steve Bernier 0 Reputation points
1 answer One of the answers was accepted by the question author.

Defender Laptop Lock

Several days ago I received a complete screen freeze and a 800 number to call to unlock. I was told Ms Defender did this and my computer was infected. Is this possible/ What is next/?

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2026-05-12T14:59:31.1766667+00:00
Ed Zadel 20 Reputation points
accepted 2026-05-12T15:32:52.6633333+00:00
Ed Zadel 20 Reputation points
1 answer

My microsoft account was hacked they have changed the email name but i have proof off ownership

Yesterday my account was hacked when I was a sleep I didn't know till I woke up and my account email had been changed without my consent is there anything you can do

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2026-05-08T06:21:53.2+00:00
Dylan GALLAGHER 0 Reputation points
answered 2026-05-08T06:22:07.0566667+00:00

AI answer

1 answer

Question on Microsoft Defender for Identity Sensor Version

While viewing the Microsoft Defender for Identity, I have one domain controller that is showing "Ready for Migration". However, when I click into it, there is no additional information letting me know exactly what that is referring to. Is that…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
asked 2026-04-09T10:19:37.44+00:00
Kalel 140 Reputation points
commented 2026-05-04T15:58:32.5266667+00:00
Derek Morgan II 80 Reputation points