Forum Discussion

Microsoft

Feb 23, 2021

[Announcement] Azure Defender integration with MDE for Windows Server 2019

We are happy to share that Azure Defender integration with MDE (Microsoft Defender for Endpoint) for Windows Server 2019 and Windows 10 Multi-Session (formerly Enterprise for Virtual Desktops (EVD) i...

kelvinxjh

Copper Contributor

Jan 15, 2022

StanislavBelov
Hi, I find out that when we deploy Windows 10 virtual desktop from Microsoft image plan 20h2-ent, the virtual machine doesn't have the MDE.Windows extension installed.

However, if we deploy another new Virtual machine using copied OS disk from previous VM, this new VM has an MDE.Windows extension installed, but it has error status:

The provisioning of machine xxxxx failed.
Failed to configure Microsoft Defender for Endpoint: Onboarding to MDE via Microsoft Defender for Cloud for this operating system is not supported

I don't understand how does this MDE.Windows extension got installed on the new VM, but not installed on first VM.

gaurav3723
Copper Contributor
Mar 09, 2022
kelvinxjh is your issue resolved i am facing the similar error.
- nathan_mitten_rpa
  Copper Contributor
  Mar 21, 2022
  We are also running into the same issue with this.
StanislavBelov
Microsoft
Jan 16, 2022
Please open a support ticket to verify supportability of your scenario.
- mihralibey
  Microsoft
  Jan 26, 2022
  Thank you Stanislav,
  Does Monitoring Agent and Log Analytics Workspace still required for Defender for Cloud? for Azure and non-Azure Servers?
  - StanislavBelov
    Microsoft
    Jan 27, 2022
    Yes, it is required in order to collect information (events, logs, etc) from the OS. Many Defender for Servers (one of the Defender for Cloud plans) features rely on this collection.