Daily Defender NewsUpdates center on Mobile TVM connectivity and Conditional Access, with additional Endpoint tagging limitations and a Defender for Identity role-table change.
Endpoint · Endpoint protectionThe updated guidance lists onboarding, security reporting, and iOS TVM as Mobile TVM service uses. It warns that restrictive Conditional Access policies can disrupt these flows and recommends excluding the service from those policies.
Endpoint · Endpoint protectionThe Mtd article now lists the firewall and proxy URLs required to onboard and maintain Microsoft Defender for Endpoint devices on Android and iOS in both commercial and US Government cloud environments. Administrators should verify that the applicable domains are allowed.
Endpoint · Endpoint protectionThe DeviceTagging registry key supports only one tag in the Group value. Tags assigned through other methods are not written there, so the registry value may not represent every tag on a device; multiple tags should use another supported tagging method.
Identity · Identity protectionThe remediation-actions table now includes Security Operator among the roles for the Revoke session action, giving administrators an additional role to consider when reviewing or assigning session-revocation permissions.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
The documentation now lists onboarding, security reporting, and iOS TVM as Mobile TVM service uses. It also warns that restrictive Conditional Access policies can disrupt these flows and recommends excluding the service from those policies.
The article now lists firewall and proxy URLs needed to onboard and maintain Microsoft Defender for Endpoint devices on Android and iOS, covering commercial and US Government cloud environments.
The documentation now clarifies that the DeviceTagging registry key supports only one tag in the Group value. Tags assigned through other methods aren't written there, so the registry value may not show all tags on a device.
The Defender for Identity remediation-actions table now lists Security Operator among the roles for the Revoke session action.
