Forum Discussion
Microsoft.Tri.Sensor.Updater-Errors
Solution, please
2023-10-27 10:38:20.7211 Error ServiceControllerExtension ChangeServiceStatus failed to change service status [name=AATPSensor status=Running Exception=System.InvalidOperationException: Cannot start service AATPSensor on computer '.'. ---> System.ComponentModel.Win32Exception: The system cannot find the file specified
--- End of inner exception stack trace ---
at System.ServiceProcess.ServiceController.Start(String[] args)
at Microsoft.Tri.Infrastructure.ServiceControllerExtension.ChangeServiceStatus(String name, ServiceControllerStatus status, TimeSpan timeout, Nullable`1 awaitedStatus)]
2023-10-27 10:43:20.8047 Error ServiceControllerExtension ChangeServiceStatus failed to change service status [name=AATPSensor status=Running Exception=System.InvalidOperationException: Cannot start service AATPSensor on computer '.'. ---> System.ComponentModel.Win32Exception: The system cannot find the file specified
--- End of inner exception stack trace ---
at System.ServiceProcess.ServiceController.Start(String[] args)
at Microsoft.Tri.Infrastructure.ServiceControllerExtension.ChangeServiceStatus(String name, ServiceControllerStatus status, TimeSpan timeout, Nullable`1 awaitedStatus)]
4 Replies
JILIN_RAJU The AATPSensor is a service with a display name "Azure Advanced Threat Protection Sensor" and includes a path to an executable. When running the latest version of the sensor it's:
"C:\Program Files\Azure Advanced Threat Protection Sensor\2.217.17225.63960\Microsoft.Tri.Sensor.exe"
I think you'll need to reinstall the sensor by downloading the latest version in the portal looking at the error message you're getting.
- Thanks. Working fine
Please click Mark as Best Response & Like if my post helped you to solve your issue. This will help others to find the correct solution easily.
@JILIN_RAJU Go to the sensors tab in the MDI portal, click on the registered AD sensor, and add to the list a fully qualified DC name this sensor can contact to resolve AD entities press save wait around 10 min and check again
