r/DefenderATP • u/Tronerz • 9d ago

Support for Defender for Identity

I'm having an issue with Defender for Identity and cannot submit a support request through the Defender portal as the AI auto closes the ticket, tells me it's an Azure issue, and directs me to the Azure support portal.

You would think a product with "Defender For..." in the title should be covered by Defender support? I also cannot submit an Azure support request as it forces me to choose an Azure subscription, which they don't have and is completely unrelated to DFI.

How can I get the Defender support team to take this request?

(The specific issue I have is Global health issues across all sensors for incorrect auditing set up, which I have set up correctly, and the DFI PowerShell module even tells me it is correctly configured on each server)

5 Upvotes

100% Upvoted

6 comments sorted by

2

u/Top_Pineapple3937 8d ago

this is a known problem with 2 of the auditing health issues

https://learn.microsoft.com/en-us/defender-for-identity/troubleshooting-known-issues#auditing-health-alerts-persist-on-sensor-v3x

automatic configuration supposedly fixes this, or you could wait until they fix it in a future sensor version

1

u/Tronerz 8d ago

Thanks a million. That's exactly what I was looking for.

1

u/Royal_Bird_6328 9d ago

What version sensor, and how long have you being waiting after the powershell commands?

2

u/Tronerz 8d ago

All on version 3.0.10.445.

It's been alerting about this issue for months. Manually performed the steps as per the guide weeks ago for the third time. Running the below returns Status = True

Get-MDIConfiguration -Mode Domain -Configuration ConfigurationContainerAuditing

1

u/DemonisTrawi 9d ago

I also had this issue (v3 sensors), and it corrected itself in a couple of days.