Microsoft Defender for Endpoint
Troubleshooting

Troubleshoot Issues on Microsoft Defender for Endpoint on Android - Microsoft Defender for Endpoint | Microsoft Learn

In brief

The page now more clearly highlights Android onboarding and Xiaomi Permanent Protection issues, and refines instructions for updating Microsoft Authenticator. Wording, screenshots, links, and formatting were also refreshed.

What Defender admins need to know

Administrators can use the clearer guidance when supporting Android onboarding and sign-in issues.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

Troubleshoot issuesIssues on Microsoft Defender for Endpoint on Android - Microsoft Defender for Endpoint | Microsoft Learn

When onboarding a device, you might see sign in issues after the app is installed.

During onboarding, you might encounter sign in issues after the app is installed on your device.

This article provides solutions to help address the sign-onin issues.

Sign in failed - unexpected error

**Sign in failed:**Unexpected error, try later

Screenshot shows a sign-in failed error Unexpected error in the sign-in page of the Microsoft Defender 365 portal.

Message:

Cause:

You have an older version of "the Microsoft Authenticator" app installed on your device.

Solution:

Install the latest version and of Microsoft Authenticator from the Google Play Store and try again.

Sign in failed - invalid license

**Sign in failed:**Invalid license, contact administrator

Screenshot shows the directive contact details in the sign-in page of the Microsoft Defender 365 portal.

**Message:**Invalid license, contact administrator

Report unsafe site

Phishing websites impersonate trustworthy websites for obtaining your personal or financial information. Visit the Provide feedback about network protection page if you want toTo report a website that could be a phishing site.site, see Provide feedback about network protection.

Phishing pages aren't blocked on some OEM devices

Phishing and harmful web threats detected by Defender for Endpoint for Android aren't blocked on some Xiaomi devices. The following functionality doesn't work on these devices.

Screenshot shows a site-unsafe notification message.

Cause:

Xiaomi devices include a new permission model. This permission model prevents Defender for Endpoint for Android from displaying pop-up windows while it runs in the background.

Xiaomi devices permission: "Display pop-up windows while running in the background."

Screenshot shows the setting pane in the Microsoft Defender 365 portal.

Solution:

  • Xiaomi

Defender App asks for Battery Optimization/Permanent Protection permission on devices as part of app onboarding, and selecting Allow returns an error that the permission couldn't be set. It only affects the last permission called "Permanent Protection."Protection.

Cause:

The Android devices Battery Optimization screen opens automatically as part of the onboarding flow where the user needs to give the permissions. The user must then follow these steps to get on-boarded:

  1. Select Work Profile to see all of the work profile appsapps.

    Screenshot shows the Battery optimization screen.

  2. Tap on Not optimized and select All Apps.

    Screenshot shows the Battery optimization screen with the Not optimized dropdown menu.

    Screenshot shows the Batter optimization screen with All apps selected.

  3. Scroll down to find Microsoft Defender and tap on itit.

    Screenshot shows the Batter optimization screen with the Microsoft Defender option.

  4. Select Don't Optimize option and tap on Done.

    Screenshot shows the Batter optimization screen with option Don't optimize and the Done button.

  5. Navigate back to Defender

Solution 2 (needed in case the Solution 1 doesn't work):

  1. Install the Microsoft Defender for Endpoint app in personal profile. (Sign-Sign-in isn't required.)
  2. Open the Company Portal and tap on Settings.
  3. Go to the Battery Optimization section, tap on the Turn Off button, and then select on Allow to turn off Battery Optimization for the Company Portal.
  4. Again, go to the Battery Optimization section and tap on the Turn On button. The battery saver section opens.
  5. Find the Defender app and tap on it.
  6. Select No Restriction. Go back to the Defender app in work profile and tap on Allow button.

The application shouldn't be uninstalled from personal profile for this solution to work.

Unable to use certain third party applications along with the Microsoft Defender for Endpoint app (VPN)

Applies to: (Not limited) Apps handling banking, government services, or handling sensitive personal informationinformation.

Cause: Some applications, such as those used for banking, government services, or handling sensitive personal information, maymight restrict access if a VPN is detected on your device. These restrictions are determined by the app developer as part of theirits implementation and even appliesapply to all VPNs, including third-party VPNs *including third party on the device. Microsoft Defender doesn't control or enforce this behavior through its settings or policies.

Workaround: If an app doesn't function while a VPN is enabled or present in the work profile, you might need to disable the VPN or work profile when you use the app. Users should enable VPN when they're no longer using the app to ensure that their devices are protected.

  1. Open the Microsoft Defender for Endpoint application on your device and select the profile icon in the top-left corner.

  2. Select Help & feedback > Send feedback.

    Screenshots show how to send feedback and logs from the Microsoft Defender mobile app options menu.

  3. Provide details of the issue that you're facing face and check Include diagnostic data. We recommend selecting Include your email address so that the team can reach back to you with a solution or a follow-up.

  4. Select on Submit to successfully send the feedback. \ No newline at end of file