Troubleshooting MDE On-Boarding issues

Question

Server 2016&nbsp;MDE Client Analyzer ResultsScript Version: 28June2023 | Script RunTime: 19/10/2023 2:54:21 PM +01:00 | |Device InformationGeneral Device DetailsDevice nameAEGVPWMAPP43Device Operating SystemWindows Server 2016 StandardOS build numberMicrosoft Windows NT 10.0.14393.0.6252OS EditionServerOS Architecture64-bitSystemBootTime09/23/2023 10:13:18System-wide WinHTTP proxyDirect access (no proxy server).&nbsp;Device Configuration Management DetailsDomain JoinedYESAzure AD JoinedNOWorkplace JoinedNOSCP Configuration TypeDomainSCP Tenant Nameaegislondon.onmicrosoft.comSCP Tenant ID35dd2efe-6dd2-4fd5-a557-271bb5b5cdfe&nbsp;AV Component Details&nbsp;EDR Component DetailsDevice IDFalseOrganization IdFalseSense Configuration versionFalseUnified agent for downlevel servers installedNO&nbsp;Check Results SummaryErrorWarningInformational021Detailed ResultsCategorySeverityIdTest NameResultsGuidanceConfigurationWarning121020MDfWSCheckPlease note that this server does not have the modern unified agent installed.Unified agent for downlevel servers is not installed on this device. It is recommended to install the new agent for optimal performance and protection capabilities. For more information refer to: Onboard Windows servers to the Microsoft Defender for Endpoint service.TelemetryWarning141003OMSListenerSenseOms listener missing.This device is unable to upload cyber data. Contact Microsoft support if issue persists and you require assistance with onboarding.ConfigurationInformational120021TenantIDInfoThe machine is assosicated with a specific AAD Tenant ID.Please ensure that the AAD Tenant ID from your MDE Tenant matches the SCP Tenant ID listed above. To see your MDE Tenant Identification refer to: M365 Security Portal&nbsp;

billclarksonantill · Answer

Hey&nbsp;greeny909&nbsp;&nbsp;Try these steps, the Microsoft documentation isnt clear unfortunately&nbsp;Install the Windows Defender server role onto the server and then download the onboarding the onboarding package from the Microsoft 365 Defender portal&nbsp;The underlying service is required to be installed before the onboarding package will do anything&nbsp;&nbsp;Also check to see if all your network connectivity is available to that server from the link here

pjr_cdf · Answer

greeny909&nbsp;&nbsp;How are you trying to onboard? GPO/SCCM??&nbsp;Some good links here&nbsp;https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-server-endpoints?view=o365-worldwide#windows-server-2012-r2-and-windows-server-2016&nbsp;This script is VERY useful -&nbsp;https://github.com/microsoft/mdefordownlevelserver

Forum Discussion

Troubleshooting MDE On-Boarding issues

Share

Resources

Device name	AEGVPWMAPP43
Device Operating System	Windows Server 2016 Standard
OS build number	Microsoft Windows NT 10.0.14393.0.6252
OS Edition	Server
OS Architecture	64-bit
SystemBootTime	09/23/2023 10:13:18
System-wide WinHTTP proxy	Direct access (no proxy server).

Domain Joined	YES
Azure AD Joined	NO
Workplace Joined	NO
SCP Configuration Type	Domain
SCP Tenant Name	aegislondon.onmicrosoft.com
SCP Tenant ID	35dd2efe-6dd2-4fd5-a557-271bb5b5cdfe