Forum Discussion

Dave Elerick's avatar
Dave Elerick
Copper Contributor
Jul 10, 2019

Server 2012R2 and Server 2016 not reporting WDATP sensor data

We recently on-boarded a handful of Server 2012R2, 2016, and 2019 servers, as well as some Win10 laptops. All show "last seen" dates that are current. However, none of the 2012R2 or 2016 servers are ...
  • DannyC_Gamma's avatar
    DannyC_Gamma
    Jul 16, 2019

    Dave Elerick This functionality is a part of the Threat & Vulnerability Management feature. 

     

    Currently, only Windows 10/2019/1903 are supported. I'm led to believe the functionality will be backported into 2012R2/2016 at some point in the future

     

     

Dave Elerick's avatar
Dave Elerick
Copper Contributor

Ok DannyC_Gamma , I understand. I guess that MSFT was a bit confusing then with their information and tools. Why would one even want to on-board 2012/2016 servers at this time then? They offer the tool (MMA agent). The current info and tools available on their on-boarding page would make sense if they plan to back-port that functionality, at least to 2016 given Defender is baked in. Odd, but now explainable. Thank you very much. 

DannyC_Gamma's avatar
DannyC_Gamma
Brass Contributor
Jul 16, 2019
You still benefit from the EDR functionality so still very much worth deploying across your server estate, in my opinion. The Threat & Vulnerability stuff wasn't part of the original functionality and was seen as being very much a bonus for us.

I will agree that information wasn't great. Also, I seem to recall that, going back to late last year, the MMA wasn't required for 2016 Server. Shows that Microsoft are moving quickly with this product - the evolution has been fairly rapid.
  • Dave Elerick's avatar
    Dave Elerick
    Copper Contributor
    Jul 16, 2019

    This is good info, I really appreciate your reply and your point on the EDR does make sense. Thanks again. 

Resources