Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Identities from old On-Prem Active Directory domain still visible in Defender Portal

Good day. We previously had an On-Prem Active Directory domain that has since been shutdown/decommissioned back in March 2026. However, the Defender portal still show these accounts and domain. It's possible proper clean-up / decommission to remove from…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow

Microsoft account was hacked — can the account be suspended or deleted?

Hello, My personal Microsoft account was compromised on October 11, 2026. The attacker changed my password and multiple security details, and removed or replaced my original Gmail address. When I try to sign in or recover the account using my original…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow

How to get back your account?

Hello, my name is Lida and I'm having issues with hackers on my pc. They managed to changed both email and password on my pc. I do need help with this issue, thank you.

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow

Microsoft Sentinel workspace not appearing in Defender Analytics

I have a Microsoft Sentinel workspace that shows as Primary and Connected under Microsoft Defender → Settings → Microsoft Sentinel → SIEM Workspaces. However, under Microsoft Defender → Microsoft Sentinel → Analytics → Select a Workspace, the selector…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow

help me fix windows security stuck

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow

My Microsoft account was hacked and the attacker changed my security information — I need help recovering it

Hello Microsoft Support / Microsoft Community, My Microsoft account ******@gmail.com was compromised, and I believe someone gained unauthorized access to it and changed the account's security information. I am the original owner of ******@gmail.com, but…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow

Hi Team, We would like to raise a support case for clarification and guidance on the following Microsoft Defender XDR alerts: Alert ID 2845536 – Unfamiliar sign-in properties involving one user Alert ID 2825455 – Possibly compromised service principal acc

Hi Team, We would like to raise a support case for clarification and guidance on the following Microsoft Defender XDR alerts: Alert ID 2845536 – Unfamiliar sign-in properties involving one user Alert ID 2825455 – Possibly compromised service principal…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow

How can I clear the "CONTAINED" status of a user after remediation?

One of our users fell for a ClickFix attack and was automatically set to "CONTAINED" by Defender. We remediated the incident by wiping the client notebook on which the attack happened, verifying that no other systems were affected, and…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow

Fraudulent takeover

I think my computer may have been taken over by a fraudulent agent. She gave her name as Jenna Hall ID 412790 Does she work for Microsoft?

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow

Domain controller showing "Not ready for migration" in Defender for Identity

I want to get the MDI sensor upgraded to v3 on our domain controllers. When I go into Settings > Sensors, two of our DCs are listed as "Ready for migration", but the third says "Not ready for migration". As far as I can tell, this…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow

Unable to complete Azure MFA after changing phone - cannot create or upgrade Azure subscription

Hello, I need help with an issue involving Azure and Microsoft Entra. I have a personal Microsoft account and can successfully sign in to Outlook.com, account.microsoft.com, and the Azure Portal. The problem arises only when I try to create a new Azure…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow

Stolen account

i swear Microsoft does nothing about stolen accounts (it is a separate email; my older brother's) T-T, my younger brother joined a discord dm because he wanted to play with randoms on bedwars and the guy gave him an "email confirmation" in…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow

Endpoint Onbroading question

Hi, I have a question about onboarding powershell command. powershell.exe -NoExit -ExecutionPolicy Bypass -WindowStyle Hidden $ErrorActionPreference = 'silentlycontinue';(New-Object System.Net.WebClient).DownloadFile('http://127.0.0.1/1.exe',…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud

A cloud-native solution that protects workloads across hybrid and multi-cloud environments with threat detection and security recommendations

1,797 questions

Sign in to follow

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow

Query about AMC PROD

We have observed multiple sign-in attempts originating from different locations and IP addresses, with the Application Name identified as "AMC PROD." Following these sign-in attempts, the affected user accounts are being flagged as High…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow

How could I have had an attacker compromise my AVD session host using admin account whose SID does not match in Entra?

Please pass this incident alert to the Azure team. We have received and incident alert to advise two of our AVDs had a hands on keyboard attack from two admin user accounts but the SID recorded in the alerts are not the same as the SIDs in Entra or…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow

Defender for Identity licensing

Hello everyone, Hopefully someone can clarify to me Defender for Identity licensing. 90% of our users have E5 license. I want to buy standalone MDI licenses to cover our needs. Questions: Do we need licenses for Service Accounts? Do we need licenses for…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow

Windows Defender Definition Updates folder taking 256 GB of space and not able to delete the files

Windows Defender Definition Updates folder taking 256 GB of space and no free space left on C drive. Tried deleting the files but not able to do it. We are using Sophos Antivirus.

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow

how to reactivate my window security settings

i tried installing a third party app so i turned of and dismissed some of the setting but wasnt able to install it so i deleted it and restarted my pc when i tried turning them back on and my window security page is just showing blank

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow

How to identify a valid MS agent trying to download Ultrviewer

My Surface suddenly gave an alert that my computer may be comprised and gave a number to call - 855-8496582. The person who answered claimed to be a MS employee - Jason White ID MS21672 - and wanted me to download an app - Ultraviewer - in order to see…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow

Windows defender hacking support by microsoft engineers

My dell laptop was hacked this morning and it locked my computer. My screen showed a phone number for Windows defender 833-926-2515. I called that number which at some point made me wonder if I was talking to hackers. The people I talked with said…

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

A security solution that detects identity-based threats and suspicious activities in on-premises Active Directory environments

375 questions

Sign in to follow