Forum Discussion

StanislavBelov's avatar
StanislavBelov
Icon for Microsoft rankMicrosoft
Feb 23, 2021

[Announcement] Azure Defender integration with MDE for Windows Server 2019

We are happy to share that Azure Defender integration with MDE (Microsoft Defender for Endpoint) for Windows Server 2019 and Windows 10 Multi-Session (formerly Enterprise for Virtual Desktops (EVD) i...
kelvinxjh's avatar
kelvinxjh
Copper Contributor
Jan 15, 2022

StanislavBelov 
Hi, I find out that when we deploy  Windows 10 virtual desktop from Microsoft image plan 20h2-ent, the virtual machine doesn't have the MDE.Windows extension installed.

However, if we deploy another new Virtual machine using copied OS disk from previous VM, this new VM has an MDE.Windows extension installed, but it has error status:


The provisioning of machine xxxxx failed.
Failed to configure Microsoft Defender for Endpoint: Onboarding to MDE via Microsoft Defender for Cloud for this operating system is not supported


I don't understand how does this MDE.Windows extension got installed on the new VM, but not installed on first VM.

StanislavBelov's avatar
StanislavBelov
Icon for Microsoft rankMicrosoft
Jan 16, 2022
Please open a support ticket to verify supportability of your scenario.
  • mihralibey's avatar
    mihralibey
    Icon for Microsoft rankMicrosoft
    Jan 26, 2022

    Thank you Stanislav,
    Does Monitoring Agent and Log Analytics Workspace still required for Defender for Cloud? for Azure and non-Azure Servers?

    • StanislavBelov's avatar
      StanislavBelov
      Icon for Microsoft rankMicrosoft
      Jan 27, 2022
      Yes, it is required in order to collect information (events, logs, etc) from the OS. Many Defender for Servers (one of the Defender for Cloud plans) features rely on this collection.

Resources