Forum Discussion

cumpleby's avatar
cumpleby
Copper Contributor
Jul 23, 2021

Servers not showing AV Version in Defender Security Center Reports

Ive rolled out Windows Defender to our 2016 and 2019 servers. They are showing in Defender Security Center, however when running Advanced Hunting queries or queries through PowerBI they are not pulling through the AV Signature version or Engine Version. Doing a little bit of digging ive found the following:-

 

Windows 2016 Server - under HKLM\Software\Policies\Microsoft\Windows Advanced Threat Protection theres a registry key called ConfigurationPending, what is this as it is onboarded?

 

Windows 2019 Server - Under HKLM\Software\Policies\Microsoft\Windows Advanced Threat Protection theres a registry key called latency with a value of Demo, what is this, could this be causing it to not report fully?

 

Not too sure  if this is related just trying to find out why the AV INformation isnt pulling through for servers and it is for clients?

 

Any help on this would be much appreciated.

 

Thanks

4 Replies

  • hou8182's avatar
    hou8182
    Copper Contributor
    Did anyone get an answer to this? I'm seeing the same issue on 2016.
    • Jonhed's avatar
      Jonhed
      Iron Contributor
      This at least appears to be fixed for Windows Server 2019, as I am able to get the version info through advanced queries.

      I don't have any 2016 servers though so no idea about those unfortunately.

Resources