563 questions with Microsoft Security | Intune | Security tags

Sort by: Updated
2 answers

Tenant lockout via Conditional Access policy - all admins blocked - request Data Protection Team - Case 2608241420002425

Our production tenant has been fully locked out for 3+ days by an accidental from a employee including our BTG account. Conditional Access change (Block / All users / All apps / All locations). All Global Administrators and the break-glass account are…

Microsoft Security | Intune | Security
asked 2026-08-26T09:39:53.1966667+00:00
Cem Akyar 0 Reputation points
answered 2026-08-27T17:11:51.7633333+00:00
Cem Akyar 0 Reputation points
1 answer

Intune Firewall Default Outbound Block Cuts Connectivity Before Firewall Rules Apply

I am deploying two Intune Firewall policies: A Firewall Configuration policy A Firewall Rules policy In the Firewall Configuration policy, I have configured the Default Outbound Action as Block, with the intention of allowing only the required…

Microsoft Security | Intune | Security
asked 2026-08-18T12:14:34.4533333+00:00
Abhishek Kulkarni 0 Reputation points
commented 2026-08-18T14:20:56.07+00:00
Abhishek Kulkarni 0 Reputation points
0 answers

Bitlocker Drive locked - error shows - The password failed to unlock the volume D

As we confirmed that the BitLocker recovery key is successfully escrowed in Entra ID/Intune and that the Recovery Key ID stored in Entra matches the Recovery Password protector ID on the encrypted D: drive. also verified the BitLocker protectors on the…

Microsoft Security | Intune | Security
asked 2026-08-15T16:04:43.95+00:00
Datacenter Support 0 Reputation points
1 answer

AllowInstanceIDs registry key not unblocking USB until manual device uninstall

Hi everyone, I am building a batch script to manage USB storage policy via Device Installation Restrictions in the registry under HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions. The global block works fine, but when I attempt to…

Microsoft Security | Intune | Security
asked 2026-08-10T17:47:20.5633333+00:00
shabir magray 0 Reputation points
answered 2026-08-10T18:53:20.6533333+00:00
Marcin Policht 104.4K Reputation points MVP Volunteer Moderator
1 answer

USB Access Policy – Blocking Baseline and SID Rule Issue

I would like to implement a baseline policy where all USB devices are blocked by default, while allowing access only to specific approved USB devices for designated users. However, when I try to configure this using SID-based rules, it doesn’t behave as…

Microsoft Security | Intune | Security
asked 2026-06-15T10:37:54.66+00:00
Aran Billen 971 Reputation points
commented 2026-06-16T23:11:11.86+00:00
Marcin Policht 104.4K Reputation points MVP Volunteer Moderator
1 answer

HP Wolf Security

I am having a terrible time removing HP Wolf Security from 4 of the endpoints I manage, it either repairs or will not remove in the first place. I need defender to be primary and I need to get these computers from showing as non-compliant. Please help.

Microsoft Security | Intune | Security
asked 2026-04-21T11:06:09.11+00:00
Thomas Cox 0 Reputation points
commented 2026-06-04T16:04:44.9833333+00:00
Pauline Mbabu 1,840 Reputation points Microsoft Employee
1 answer

Unable to edit ASR rules created in Intune - (Block use of copied or impersonated system tools, Block rebooting machine in Safe Mode)

Unable to edit ASR rules created in Intune - (Block use of copied or impersonated system tools, Block rebooting machine in Safe Mode)

Microsoft Security | Intune | Security
asked 2026-06-03T05:17:31.92+00:00
Harishkumar G (MINDTREE LIMITED) 0 Reputation points Microsoft External Staff
answered 2026-06-03T05:18:14.6366667+00:00

AI answer

1 answer

Hacked microsoft account (email, phone number and password changed)

I lost my account this morning, the email was changed to ******@ishowfirstmail.com. (I can send the whole email if needed) and then removed my own email from security information. I tried filling out those forms for account recovery but they say that i…

Microsoft Security | Intune | Security
asked 2026-05-19T16:38:57.7+00:00
saeq saeq 5 Reputation points
answered 2026-05-19T16:39:14.2933333+00:00

AI answer

1 answer

Bitlocker Key does not work. I checked the details stored with Microsoft and used that to unlock but get an error message

Bitlocker Key does not work. I checked the details stored with Microsoft and used that to unlock but get an error message stating the code is not valid. I have also removed the Laptop from the Register but still not able unlock. I raseid a ticket sever…

Microsoft Security | Intune | Security
asked 2026-05-14T10:47:55.65+00:00
Mayur Doshi 0 Reputation points
answered 2026-05-14T10:48:11.7766667+00:00

AI answer

3 answers

Windows Security Key Login with Multiple Accounts on Key

We are currently implementing security key logins for Windows 11 using YubiKey FIDO keys on our AutoPilot deployed AzureAD only joined devices. So far the implementation is working well for the majority of our users. Our administrators have separate…

Microsoft Security | Intune | Security
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Windows for business | Windows Client for IT Pros | User experience | Other
asked 2023-06-24T00:24:10.2266667+00:00
Thomas Pike 20 Reputation points
answered 2026-05-07T19:01:39.5866667+00:00
Graham C 36 Reputation points
0 answers

WDAC / App Control for Business filepath rules not honored on Windows Server 2019 (SPF .p7b) — same policy works on Server 2022 (MPF .cip)

Good afternoon, I would like to open this thread to discuss a specific behavior we are observing with the legacy WDAC — now App Control for Business — when deploying policies to Windows Server 2019. Scenario We are currently rolling out App Control for…

Microsoft Security | Intune | Security
asked 2026-04-27T20:24:10.41+00:00
Ruben Faustinita 100 Reputation points
edited the question 2026-04-27T20:26:01.98+00:00
Ruben Faustinita 100 Reputation points
0 answers

ASR - Excel Memory Issue

Dear All, We have both MDM and MDE enrolled devices. policies are applied from ASR, some how we got the below error and we removed app & browser isolation, made ASR reduction rule in audit mode and excluded office files. We have only application…

Microsoft Security | Intune | Security
asked 2026-01-25T14:30:21.9966667+00:00
karthik palani 661 Reputation points
commented 2026-04-23T09:10:05.1066667+00:00
Catherine Kyalo 3,180 Reputation points Microsoft Employee
1 answer

I ain't get codes to my email to change my number

Everything i try to change my number i ain't get any codes sent to my email to verify it's me

Microsoft Security | Intune | Security
asked 2026-04-22T17:11:37.66+00:00
steven bullock 5 Reputation points
answered 2026-04-22T17:11:50.58+00:00

AI answer

2 answers

Understanding the Security Trade‑offs Between Edge MAM and Secure Browsers

We are currently evaluating BYOD desktop access models and trying to clearly understand the security boundaries between policy‑based controls (Conditional Access, device posture, and DLP using Edge MAM) and browser‑level isolation approaches (secure…

Microsoft Security | Intune | Security
asked 2026-03-12T11:02:18.6533333+00:00
answered 2026-04-17T20:07:52.6566667+00:00
Pauline Mbabu 1,840 Reputation points Microsoft Employee
1 answer

LSA protection and attack surface rules

Hi, We are implemting defender ssecurity. After putting ASR in audit we start to follow the recommandations. After son time we see the ASR rule "Block credential stealing from the Windows local security authority subsystem (lsass.exe)" is…

Microsoft Security | Intune | Security
asked 2023-11-11T19:15:16.79+00:00
Peter 0 Reputation points
commented 2026-04-15T17:10:34.06+00:00
GlennGagn-2395 77 Reputation points
6 answers

Cant remove work or school account from personal PC

recently left an organization and my ID there was disabled. When employed there, I used my personal PC for work as well as my own stuff. Now I get frequent requests to log in to my Work or School Account. How do I remove the Work account from my personal…

Windows for business | Windows Client for IT Pros | Devices and deployment | Configure application groups
Microsoft Security | Intune | Security
Windows for business | Windows Client for IT Pros | User experience | Other
asked 2023-05-18T19:28:15.87+00:00
Redistro 241 Reputation points
commented 2026-04-13T16:33:44.46+00:00
bmwinatl Tron 0 Reputation points
3 answers

Advanced Hunting missing

Hi We have Microsoft 365 Premium licenses which include Defender for Business. I am trying to use Advanced Hunting but that link missing from the Security Portal. What am I missing?

Microsoft Security | Intune | Security
asked 2023-04-05T16:43:06.76+00:00
IMK 586 Reputation points
edited an answer 2026-04-13T03:48:30.7433333+00:00
Jaideep Singh 0 Reputation points
1 answer One of the answers was accepted by the question author.

Possible to block just Screen Recording but not Screenshots?

Previously, when enabling the blocking of screen capturing for iOS devices, and then setting a group to exclude that. Users in the group to be included could not screen capture or screen record. While users in the exclude group, could screen capture, but…

Microsoft Security | Intune | Security
Microsoft Security | Intune | Microsoft Intune iOS
asked 2023-12-07T23:35:19.3433333+00:00
Jacob Rathbun 20 Reputation points
accepted 2026-04-10T14:01:21.11+00:00
Jacob Rathbun 20 Reputation points
1 answer

2 Bitlocker Policies

Hi all I have 2 active bitlocker policies Is it possible to remove one policy without losing Encryption Keys?

Microsoft Security | Intune | Security
asked 2026-04-07T12:42:16.7066667+00:00
Vionne Joorst 0 Reputation points
commented 2026-04-07T16:33:32.0733333+00:00
Marcin Policht 104.4K Reputation points MVP Volunteer Moderator
0 answers

Smime certificate impossible to use it on outlook 2021

Hello, i am having a problem when I need to configure the smime certificate on a PC with outlook classic 2021. I have installed the CA on 4 computers with outlook 2021 e 2019 with no issue but on this one after imported from outlook it does not appear to…

Microsoft Security | Intune | Security
asked 2025-11-27T12:52:08.6466667+00:00
andrea la ferla 0 Reputation points
commented 2026-03-27T14:48:51.69+00:00
Catherine Kyalo 3,180 Reputation points Microsoft Employee