Passive mode is showing in console but active mode at Server

Hi all,

on some Devices (Linux + Windows Server) we saw in the Defender for Endpoint console under Device Overview this entry:

but running MDATP health we get this information:

and also in the picture below real_time_protection_enabled is showing as false. There is no 3rd party Solution installed.

Why could this happen and how avoid this wrong information?

Thanks