Some users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center

Title: Some users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center

User impact: Users may have been unable to view Microsoft Defender for Endpoint manual actions through the Action center.

More info: Impact was specific to users who aren't security or global admins and attempted to view manual actions within the Microsoft Defender for Endpoint Action center History tab.

Final status: We've finished the deployment of our code fix and validated this issue has been resolved in full.

Scope of impact: Users who aren't security or global admins attempting to view Microsoft Defender for Endpoint manual actions through the Action center may have been impacted.

Start time: Sunday, April 26, 2026, at 12:00 PM UTC

End time: Friday, May 08, 2026, at 7:00 PM UTC

Root cause: A previously deployed precautionary code fix for another issue was restricting visibility of Microsoft Defender for Endpoint manual actions in the Action Center to only Global or Security Administrators.

Next steps:
- We're reviewing our code testing and validation procedures based on our findings of the cause of this event to better detect and prevent similar impact from occurring in the future.

This is the final update for the event.

Title: Some users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center

User impact: Users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center.

More info: Impact is specific to users who aren't security or global admins and attempt to view manual actions within the Microsoft Defender for Endpoint Action center History tab.

Current status: The deployment of our solution requires more time than previously expected, which is delaying remediation of the impact. We're monitoring the deployment and will provide an updated timeline for the completion of our mitigations once they've become available.

Scope of impact: Users who aren't security or global admins attempting to view Microsoft Defender for Endpoint manual actions through the Action center may be impacted.

Root cause: A previously deployed precautionary code fix for another issue is restricting visibility of Microsoft Defender for Endpoint manual actions in the Action Center to only Global or Security Administrators.

Next update by: Sunday, June 07, 2026, at 4:00 PM UTC

Title: Some users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center

User impact: Users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center.

More info: Impact is specific to users who aren't security or global admins and attempt to view manual actions within the Microsoft Defender for Endpoint Action center History tab.

Current status: The deployment of the fix is taking longer than expected to complete and we estimate completion by our next scheduled update.

Scope of impact: Users who aren't security or global admins attempting to view Microsoft Defender for Endpoint manual actions through the Action center may be impacted.

Root cause: A previously deployed precautionary code fix for another issue is restricting visibility of Microsoft Defender for Endpoint manual actions in the Action Center to only Global or Security Administrators.

Next update by: Monday, June 01, 2026, at 4:00 PM UTC

Title: Some users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center

User impact: Users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center.

More info: Impact is specific to users who aren't security or global admins and attempt to view manual actions within the Microsoft Defender for Endpoint Action center History tab.

Current status: We're progressing with deploying the code fix to all affected environment and expect this process to complete by our next scheduled update.

Scope of impact: Users who aren't security or global admins attempting to view Microsoft Defender for Endpoint manual actions through the Action center may be impacted.

Root cause: A previously deployed precautionary code fix for another issue is restricting visibility of Microsoft Defender for Endpoint manual actions in the Action Center to only Global or Security Administrators.

Next update by: Wednesday, May 27, 2026, at 4:00 PM UTC

Title: Some users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center

User impact: Users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center.

More info: Impact is specific to users who aren't security or global admins and attempt to view manual actions within the Microsoft Defender for Endpoint Action center History tab.

Current status: We're continuing to deploy our aforementioned code fix to a number of users to validate the effectiveness of our fix prior to a wider deployment that is due to be deployed by our next scheduled update.

Scope of impact: Users who aren't security or global admins attempting to view Microsoft Defender for Endpoint manual actions through the Action center may be impacted.

Root cause: A previously deployed precautionary code fix for another issue is restricting visibility of Microsoft Defender for Endpoint manual actions in the Action Center to only Global or Security Administrators.

Next update by: Monday, May 25, 2026, at 4:00 PM UTC

Title: Some users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center

User impact: Users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center.

More info: Impact is specific to users who aren't security or global admins and attempt to view manual actions within the Microsoft Defender for Endpoint Action center History tab.

Current status: We've completed validations of a code fix to assist with replaying affected actions and restoring impacted data. We're initiating deployment of our code fix to a subset of users in Canada to validate the effectiveness of our fix prior to wider deployment. We aim to provide a timeline to wider deployment by our next scheduled update.

Scope of impact: Users who aren't security or global admins attempting to view Microsoft Defender for Endpoint manual actions through the Action center may be impacted.

Root cause: A previously deployed precautionary code fix for another issue is restricting visibility of Microsoft Defender for Endpoint manual actions in the Action Center to only Global or Security Administrators.

Next update by: Wednesday, May 20, 2026, at 4:00 PM UTC

Title: Some users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center

User impact: Users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center.

More info: Impact is specific to users who aren't security or global admins who are attempting to view manual actions within the Microsoft Defender for Endpoint Action Center History Tab.

Current status: Our efforts to replay affected actions to restore impacted data are ongoing, while validating a code fix to ensure proper processing. We're currently testing the replay script in our internal environment, and once validation is complete, we will share an estimated timeline for deployment to the affected infrastructure.

Scope of impact: Users who aren't security or global admins attempting to view Microsoft Defender for Endpoint manual actions through the Action center may be impacted.

Root cause: A previously deployed precautionary code fix for another issue is restricting visibility of Microsoft Defender for Endpoint manual actions in the Action Center to only Global or Security Administrators.

Next update by: Sunday, May 17, 2026, at 4:00 PM UTC

Title: Some users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center

User impact: Users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center.

More info: Impact is specific to users who aren't security or global admins who are attempting to view manual actions within the Microsoft Defender for Endpoint Action Center History Tab.

Current status: We’re continuing to replay the affected actions to restore impacted data. In parallel, we're validating a code fix to ensure impacted actions are processed as expected, and are assessing its effectiveness within our internal testing environment, before progressing with a gradual rollout to the affected environment. We'll share an estimated completion timeline when one becomes available.

Scope of impact: Users who aren't security or global admins attempting to view Microsoft Defender for Endpoint manual actions through the Action center may be impacted.

Root cause: A previously deployed precautionary code fix for another issue is restricting visibility of Microsoft Defender for Endpoint manual actions in the Action Center to only Global or Security Administrators.

Next update by: Wednesday, May 13, 2026, at 4:00 PM UTC

Title: Some users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center

User impact: Users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center.

More info: Impact is specific to users who aren't security or global admins who are attempting to view manual actions within the Microsoft Defender for Endpoint Action Center History Tab.

Current status: We’re proceeding with replaying the affected actions and are working to expedite this process. We'll provide a completion timeline once it becomes available.

Scope of impact: Users who aren't security or global admins attempting to view Microsoft Defender for Endpoint manual actions through the Action center may be impacted.

Root cause: A previously deployed precautionary code fix for another issue is restricting visibility of Microsoft Defender for Endpoint manual actions in the Action Center to only Global or Security Administrators.

Next update by: Tuesday, May 12, 2026, at 4:00 PM UTC

Title: Some users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center

User impact: Users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center.

More info: Impact is specific to users who aren't security or global admins who are attempting to view manual actions within the Microsoft Defender for Endpoint Action Center History Tab.

Current status: We're continuing to replay affected associated actions and will provide a completion timeline once one becomes available.

Scope of impact: Users who aren't security or global admins attempting to view Microsoft Defender for Endpoint manual actions through the Action center may be impacted.

Root cause: A previously deployed precautionary code fix for another issue is restricting visibility of Microsoft Defender for Endpoint manual actions in the Action Center to only Global or Security Administrators.

Next update by: Monday, May 11, 2026, at 4:00 PM UTC

Title: Some users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center

User impact: Users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center.

More info: Impact is specific to users who aren't security or global admins who are attempting to view manual actions within the Microsoft Defender for Endpoint Action Center History Tab.

Current status: We're replaying associated actions within the aforementioned offending fix and anticipate this process will be complete by the next scheduled update time.

Scope of impact: Users who aren't security or global admins attempting to view Microsoft Defender for Endpoint manual actions through the Action center may be impacted.

Root cause: A previously deployed precautionary code fix for another issue is restricting visibility of Microsoft Defender for Endpoint manual actions in the Action Center to only Global or Security Administrators.

Next update by: Sunday, May 10, 2026, at 4:00 PM UTC

Title: Some users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center

User impact: Users may be unable to view Microsoft Defender for Endpoint manual actions through the Action center.

More info: Impact is specific to users who aren't security or global admins who are attempting to view manual actions within the Microsoft Defender for Endpoint Action Center History Tab.

Current status: We've determined that a previously deployed precautionary code fix for another issue is restricting visibility of Microsoft Defender for Endpoint manual actions in the Action Center to only Global or Security Administrators. We're currently analyzing all our available resources to determine the next steps to fully resolve the issue.

Scope of impact: Users who aren't security or global admins attempting to view Microsoft Defender for Endpoint manual actions through the Action center may be impacted.

Root cause: A previously deployed precautionary code fix for another issue is restricting visibility of Microsoft Defender for Endpoint manual actions in the Action Center to only Global or Security Administrators.

Next update by: Sunday, May 10, 2026, at 11:00 AM UTC