misconfigured devices WDATP

Question

Hello.from a large number of computers protected by WDATP we also have some problems like: Misconfigured:Health StatusImpaired communications- 20---------------------------------------Managed by&nbsp; &nbsp; ConfigMgr 14&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Intune 1&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Unknown 5No sensor data-&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 33---------------------------------------Managed by&nbsp; &nbsp; &nbsp; &nbsp; ConfigMgr 1&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Intune 17&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Unknown 15No sensor data + Impaired communications 11----------------------------------------------------Managed by&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Intune 11&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Grand Total 64How to proceed to solve this situation - what are the steps?Thank you !!!&nbsp;

jbmartin6 · Answer

Run the MDE Client analyzer and review the results. Support will ask you to do this anyway (https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/download-client-analyzer?view=o365-worldwide)

We have a similar problem, I found that clients were dropping the registry configuration for telemetry services to use our proxy. Unknown why. But it seems that the client will still operate as 'impaired' without that setting. The main symptom was not getting process events, etc. from the client.

viorel_popa · Answer

I use Live Response Session where it's possible and all the others tools from security centerand thank you so much

ambarishrh · Answer

viorel_popa&nbsp;Please check the steps given here&nbsp;Fix unhealthy sensors in Microsoft Defender for Endpoint | Microsoft Learn

viorel_popa · Answer

ambarishrh&nbsp;yes, I know this link - only that the devices are in use, they are not reinstalled or renamed, they are all onboard and send a signal, only that they are not online all the time and I don't know how to proceed, I also have security center (microsoft) and SCCM&nbsp;

virtual_allies · Answer

Contact Customer Service

Forum Discussion

misconfigured devices WDATP

Share

Resources