Mobile Threat Defense Connectors should be healthy
Part of Maester · Intune · Tenant administration · All checks
Invoke-Maester -TestId MT.1098Overview
Section titled “Overview”This test verifies the health of Intune Mobile Threat Defense Connectors, including Microsoft Defender for Endpoint.
Each connector must be enabled and have a heartbeat in the last 48 hours. The result table explains unhealthy states and reports a missing or year-1 heartbeat as Never received.
A connector in notSetUp has not completed setup and blocks device threat messages. A connector in available has completed setup but needs a platform toggle enabled. Neither state satisfies this health check. An unresponsive connector needs attention because Intune ignores its compliance state once the configured unresponsiveness threshold is reached.
Remediation action
Section titled “Remediation action”Review each connector’s Reason in the result table. Complete setup and required permissions for a notSetUp connector, enable the relevant platform for an available connector, or remove a connector that is no longer needed. For a missing or stale heartbeat, verify the partner service and its connectivity to Intune.
For Microsoft Defender for Endpoint visit the Microsoft Defender for Endpoint Tenant Settings and ensure that the connector is also enabled from the Microsoft Defender XDR Settings as part of the Microsoft Intune connection.
Additional information:
-
Integrate Microsoft Defender for Endpoint with Intune and Onboard Devices
-
If you have a third party connector, consult your third party MTD solution. More information can be found on the Mobile Threat Defense integration with Intune learn page.
Details
Section titled “Details”Every attribute of this check
| Field | Value |
|---|---|
| Test ID | MT.1098 |
| Severity | High |
| Suite | Maester |
| Product | Intune |
| Related products | Defender |
| Feature | Tenant administration |
| Area | Devices and endpoints |
| Resource type | Connector |
| User impact | Low |
| Implementation cost | Low |
| MITRE ATT&CK | None |
| PowerShell test | Test-MtMobileThreatDefenseConnectors |
| Services | Graph |
| Compatible licenses | INTUNE_A |
Source
Section titled “Source”- Test:
tests/maester/intune/Test.MT.1098.ps1 - Documentation:
tests/maester/intune/Test.MT.1098.md