Forum Discussion

ajbravo's avatar
ajbravo
Copper Contributor
Jun 24, 2019

Demoted domain controller in coverage report

Quite a while ago, we lost a domain controller (server died), and we cleaned up the object/reference in Active Directory (deleted computer object, removed from sites and services).  Azure ATP, though...
EliOfek's avatar
EliOfek
Icon for Microsoft rankMicrosoft
Jun 24, 2019

ajbravo  if you did not uninstall the sensor prior to server loss, go into the config tab in the console UI, to the sensors list, and delete it from the list.

  • ajbravo's avatar
    ajbravo
    Copper Contributor
    Jun 25, 2019

    EliOfek I wasn't clear--the domain controller is not showing as an installed sensor, but as one which doesn't have the agent (in the "domain controller coverage report"). 

     

    So, at the top of the sensors list, it says "You have installed Azure ATP Sensor on 9 out of 10 domain controllers," when it should say "9 out of 9."

    • Or Tsemah's avatar
      Or Tsemah
      Former Employee
      Jun 28, 2019
      Hi, we're aware of the issue (lingering objects in the DC Coverage report) and are working to fix it.
      • Jake Platt's avatar
        Jake Platt
        Copper Contributor
        Jul 16, 2019

        Or Tsemah Any update on this? I just opened a case for this issue.

Resources