I use the Defender for Endpoint API to tag some devices. This generally works fine.

Now I have the following situation for some days now:

On the Website I have a specific dns name (device name) which appears two times on the website, but I only get it one time via the API.

What I did with the API:

 Try to get the device with the guid provided in the web. One guid returns the object, the other returns 404-Not found
Read all Machines and try to find the dns / the guid – did not find the missing device.

As far as I know, you cannot restrict the permissions for the devices in API queries.

Any ideas? 

​I use the Defender for Endpoint API to tag some devices. This generally works fine.
 
Now I have the following situation for some days now:
 
On the Website I have a specific dns name (device name) which appears two times on the website, but I only get it one time via the API.
 
What I did with the API:

 Try to get the device with the guid provided in the web. One guid returns the object, the other returns 404-Not found
Read all Machines and try to find the dns / the guid – did not find the missing device.

As far as I know, you cannot restrict the permissions for the devices in API queries.
 
Any ideas?   Read More

​