Troubleshoot service issues

This section addresses issues that might arise as you use the Microsoft Defender Advanced Threat service.

Server error - Access is denied due to invalid credentials

If you encounter a server error when trying to access the service, you’ll need to change your browser cookie settings. Configure your browser to allow cookies.

Elements or data missing on the portal

If some UI elements or data is missing on Microsoft Defender Security Center it’s possible that proxy settings are blocking it.

Make sure that * is included the proxy whitelist.


You must use the HTTPS protocol when adding the following endpoints.

Microsoft Defender ATP service shows event or error logs in the Event Viewer

See the topic Review events and errors using Event Viewer for a list of event IDs that are reported by the Microsoft Defender ATP service. The topic also contains troubleshooting steps for event errors.

Microsoft Defender ATP service fails to start after a reboot and shows error 577

If onboarding machines successfully completes but Microsoft Defender ATP does not start after a reboot and shows error 577, check that Windows Defender is not disabled by a policy.

For more information, see Ensure that Windows Defender Antivirus is not disabled by policy.

Known issues with regional formats

Date and time formats
There are some known issues with the time and date formats.

The following date formats are supported:

  • MM/dd/yyyy
  • dd/MM/yyyy

The following date and time formats are currently not supported:

  • Date format yyyy/MM/dd
  • Date format dd/MM/yy
  • Date format with yy. Will only show yyyy.
  • Time format HH:mm:ss is not supported (the 12 hour AM/PM format is not supported). Only the 24-hour format is supported.

Use of comma to indicate thousand
Support of use of comma as a separator in numbers are not supported. Regions where a number is separated with a comma to indicate a thousand, will only see the use of a dot as a separator. For example, 15,5K is displayed as 15.5K.

Want to experience Microsoft Defender ATP? Sign up for a free trial.

Microsoft Defender ATP tenant was automatically created in Europe

When you use Azure Security Center to monitor servers, a Microsoft Defender ATP tenant is automatically created. The Microsoft Defender ATP data is stored in Europe by default.