Microsoft
Microsoft
MicrosoftBruceSp - Can you maybe share what Error you exactly faced? If I understand you right you have one Win2012 R2 Server only with the Console installed, it does not act as Site System. The Upgrade was successful, but you cannot connect to the SMS Provider? Sounds to me the System is not on latest CU - because since this year the WMI-Hardening is enforced - more Details here: DCOM authentication hardening: what you need to know - Microsoft Community Hub
Regarding MDE - as you know - for Windows 2012 R2 - MDE has a couple of prerequisites.
MDE-Onboarding (GPO-Script) - only needed for Win10, Win11, Server 2019, Server 2022
MDE-Unified-Client – Required Win2012, Win2012R2, Win2016
MMA-Client - Required Win2012 R2 and older
So you would need to Offboard the System, Uninstall MDE-Unified-Client, Uninstall MMA-Client. Then do the Inplace Upgrade and Onboard the System again to MDE. Also have a look at the MDE-Events:
Troubleshoot Microsoft Defender for Endpoint onboarding issues | Microsoft Learn
You can also use a Configuration item and verify the MDE-Onboarding-Success:
|
Item-Name |
Type |
DataType |
Key |
Name |
Operator |
Value |
|
MDE-DisableEnterpriseAuthProxy MDE-LastCnCError MDE-Onboarding-Info-ID MDE-Onboarding-State MDE-OrgID MDE-Sense |
Registry Registry Registry Registry Registry WQL |
Integer Integer String Integer String String |
SOFTWARE\Policies\Microsoft\Windows\DataCollection SOFTWARE\Microsoft\Windows Advanced Threat Protection\Status SOFTWARE\Microsoft\Windows Advanced Threat Protection SOFTWARE\Microsoft\Windows Advanced Threat Protection\Status SOFTWARE\Microsoft\Windows Advanced Threat Protection\Status Root\cimv2:win32_services where name = ‘Sense’ |
DisableEnterpriseAuthProxy LastCncError OnboardedInfo OnboardingState OrgID State |
Equals & Must Exist Equals & Must Exist Contains & Must Exist Equals & Must Exist Equals & Must Exist Equals |
1 0 {OrgID} 1 {OrgID} Running |