Recently, a few of us were confused about an error message that exhibited itself when attempting to enable the Microsoft Defender for Office 365 option in the Microsoft 365 Defender connector for Microsoft Sentinel. Never experiencing something like this yourself, makes it even more difficult to troubleshoot. You know the scenario – user or customer says something’s not working – you try it you say, “hey, works for me.”
After a bit of back-and-forth troubleshooting, the customer resolved this through trial-and-error, and I wanted to share this particular resolution because the issue has cropped up recently more than once.
The issue was that the preview features option for Microsoft 365 Defender wasn’t turned on. After enabling it, everything started working.
To enable it:
- In the navigation pane at security.microsoft.com, select Settings.
- Select Microsoft 365 Defender.
- Select Preview features > Turn on preview features.
- Select Save.
[Subscribe to the RSS feed for this blog]
[Subscribe to the Weekly Microsoft Sentinel Newsletter]
[Subscribe to the Bi-Weekly Defender for Cloud Newsletter]
[Learn KQL with the Must Learn KQL series and book]