Forum Discussion

Copper Contributor

Jul 20, 2022

MDE conflicting with Microsoft Endpoint Configuration Manager Distribution points

Hi All, I have a strange issue with MDE and Configuration Manager, ever since I onboarded my Site server (Server 2012 R2) and Distribution points(Server 2016) I have been having very strange issues ...

Bronze Contributor

Jul 20, 2022

What kind of issues? Can you share some details?

Copper Contributor

Jul 20, 2022

Very sorry I was in a rush and looks like I missed out detail!
When MDE is monitoring the servers and I try distribute content (mainly Driver packages and Software Update packages) the content constantly fails to distribute it's not unusual to have 5-8 retries, sometimes it wont even begin and I will need to restart the site server or the distribution points. If MDE is not monitoring the configuration manager servers then all is fine.

rahuljindal
Bronze Contributor
Jul 20, 2022
Not a problem and thank you for elaborating on the issue. It could be MDE related and will also depend on the kind of policies applied. Are you using additional features like ASR, Controlled Folder Access? You may have to look at excluding the DP content locations.
- David_Smith040
  Copper Contributor
  Jul 20, 2022
  I am using ASR but the issue began before I applied ASR and I have been sure not to apply the ASR policy's that are not recommended to be used with MECM, not using Controlled Folder Access. I have applied the recommended exclusions to Microsoft Defender AV however this is not for MDE, it does not look like you can apply exclusions for MDE only Microsoft Defender AV.
  - rahuljindal
    Bronze Contributor
    Jul 20, 2022
    Then AV exclusions should suffice. Did you try running advanced hunting queries? Maybe check against AV based action type. Have a look some of the blog posts I have published on this topic. It may just help you. https://rahuljindalmyit.blogspot.com/search?q=Hunting

Resources