locked
Windows Defender ATP and Server 2019? RRS feed

  • Question

  • Noticed that only Server 2012R2 appeared in the security portal? The servers running 2019 didn't appear? Noticed the error message below. Is 2019 not supported????

    The constructor for the managed module type "Microsoft.EnterpriseManagement.Mom.Modules.WindowsDefenderATPModule.WindowsDefenderATPModule" threw an exception. This module was running in rule "Microsoft.Windows.WindowsDefenderATP.CollectEtwEvent" running for instance "" with id:"{BCF7057B-7430-4838-F55A-A834EB47832B}" in management group "AOI-79f09321-6497-4a54-9297-a7cf16912fa2".
     
     The exception text is:
     System.NotSupportedException: Environment is not supported: OS Name: 'Windows Server 2019 Standard', OS version: '10.0', OS productType: 'Server', isWorkstation=False
       at Microsoft.EnterpriseManagement.Mom.Modules.WindowsDefenderATPModule.WindowsDefenderATPModule.VerifySupportedEnvironment(IOperatingSystemInfoHelper osHelper, List`1 supportedEnvironments, Nullable`1 isWS2008R2Supported)
       at Microsoft.EnterpriseManagement.Mom.Modules.WindowsDefenderATPModule.WindowsDefenderATPModule..ctor(ModuleHost`1 moduleHost, XmlReader configuration, Byte[] previousState)

    Monday, October 28, 2019 1:39 PM

Answers

  • Boarded the server using the script.. boarding using Azure security center only seems to work for 2012r2 / 2016..

    Link: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script

    • Marked as answer by Marc-1983 Tuesday, October 29, 2019 8:11 AM
    Tuesday, October 29, 2019 8:11 AM