MDE Client analyzer reporting missing path

Hi Knut_S,

The MDE Client Analyzer error 122003 Missing Path indicates that the analyzer cannot find the following path:

C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\Cyber

This path is required for the client analyzer to run the connectivity tests to cloud service URLs.

You have already tried running the recommended fix, which is to use PsExec to create the missing path. However, this has not worked.

Here are some other things you can try:

• Make sure that you are running the PsExec command as an administrator.
• Try running the PsExec command from a different directory.
• Try running the PsExec command from a different computer.
• Try restarting the server.

If you are still unable to create the missing path, you can try creating it manually. To do this, open an elevated command prompt and enter the following command:

mkdir C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\Cyber

Once you have created the missing path, try running the client analyzer again.

If the client analyzer is still unable to run, you can try collecting the analyzer support logs using live response.

See the following article for more information:

Run the client analyzer on Windows: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/run-analyzer-windows?view=o365-worldwide

The analyzer support logs can be used to troubleshoot the issue with Microsoft support.

Additional troubleshooting tips:

• Make sure that the server is running the latest version of the MDE Client Analyzer tool.
• Make sure that the server has a valid internet connection.
• Make sure that the server is not running any other security software that is interfering with the MDE Client Analyzer tool.