# Mobile Threat Defense Connectors should be healthy

This test verifies the health of Intune Mobile Threat Defense Connectors, including Microsoft Defender for Endpoint.

Source: https://maester.dev/docs/tests/MT.1098

<!-- This file is generated by website/scripts/generate-test-docs.mjs. Do not edit manually. -->

<div class="test-byline"><div class="test-byline-avatars"><a class="test-byline-avatar test-byline-avatar--author" href="/contributors/nicolonsky" title="Nicola Suter · Original author"><img src="https://github.com/nicolonsky.png" alt="Nicola Suter" width="28" height="28" loading="lazy" decoding="async" /></a><a class="test-byline-avatar" href="/contributors/mynster9361" title="-Mynster · Co-contributor"><img src="https://github.com/Mynster9361.png" alt="-Mynster" width="28" height="28" loading="lazy" decoding="async" /></a><a class="test-byline-avatar" href="/contributors/firasenax" title="Sven Frank · Co-contributor"><img src="https://github.com/FiraSenax.png" alt="Sven Frank" width="28" height="28" loading="lazy" decoding="async" /></a></div><div class="test-byline-meta"><span class="test-byline-text">Contributed by <a href="/contributors/nicolonsky">Nicola Suter</a> with 2 co-contributors</span><a class="test-byline-link" href="/contributors">All contributors →</a></div></div>

<p class="test-part">Part of <a href="/docs/tests/maester">Maester</a> · Intune · Tenant administration · <a href="/docs/tests">All checks</a></p>

```powershell title="Run this check"
Invoke-Maester -TestId MT.1098
```

## Overview

This test verifies the health of Intune Mobile Threat Defense Connectors, including Microsoft Defender for Endpoint.

Each connector must be enabled and have a heartbeat in the last 48 hours. The result table explains unhealthy states and reports a missing or year-1 heartbeat as **Never received**.

A connector in `notSetUp` has not completed setup and blocks device threat messages. A connector in `available` has completed setup but needs a platform toggle enabled. Neither state satisfies this health check. An `unresponsive` connector needs attention because Intune ignores its compliance state once the configured unresponsiveness threshold is reached.

#### Remediation action

Review each connector's **Reason** in the result table. Complete setup and required permissions for a `notSetUp` connector, enable the relevant platform for an `available` connector, or remove a connector that is no longer needed. For a missing or stale heartbeat, verify the partner service and its connectivity to Intune.

For Microsoft Defender for Endpoint visit the [Microsoft Defender for Endpoint Tenant Settings](https://intune.microsoft.com/#view/Microsoft_Intune_DeviceSettings/TenantAdminConnectorsMenu/~/windowsDefenderATP) and ensure that the connector is also enabled from the Microsoft Defender XDR Settings as part of the [Microsoft Intune connection](https://security.microsoft.com/securitysettings/endpoints/integration).

Additional information:

* [Integrate Microsoft Defender for Endpoint with Intune and Onboard Devices](https://learn.microsoft.com/intune/intune-service/protect/microsoft-defender-integrate)

* If you have a third party connector, consult your third party MTD solution. More information can be found on the [Mobile Threat Defense integration with Intune](https://learn.microsoft.com/intune/device-security/mobile-threat-defense/overview#connector-status) learn page.

## Details

<details>
<summary>Every attribute of this check</summary>

| Field | Value |
| --- | --- |
| Test ID | MT.1098 |
| Severity | High |
| Suite | Maester |
| Product | Intune |
| Related products | Defender |
| Feature | Tenant administration |
| Area | Devices and endpoints |
| Resource type | Connector |
| User impact | Low |
| Implementation cost | Low |
| MITRE ATT&CK | None |
| PowerShell test | [Test-MtMobileThreatDefenseConnectors](https://github.com/maester365/maester/blob/main/tests/maester/intune/Test.MT.1098.ps1) |
| Services | Graph |
| Compatible licenses | INTUNE_A |

</details>

## Source

- Test: [`tests/maester/intune/Test.MT.1098.ps1`](https://github.com/maester365/maester/blob/main/tests/maester/intune/Test.MT.1098.ps1)
- Documentation: [`tests/maester/intune/Test.MT.1098.md`](https://github.com/maester365/maester/blob/main/tests/maester/intune/Test.MT.1098.md)