Forum Discussion

Ambarish Haridathan's avatar
Ambarish Haridathan
Copper Contributor
May 29, 2020

Endpoint Protection not installed on non-Azure servers

Hi all,   I've used the "Onboard servers to Security Center" with a workspace for our non Azure servers. The agent got installed successfully and could see the server on Microsoft Defender ATP as...
threat protection
Ambarish Haridathan's avatar
Ambarish Haridathan
Copper Contributor
Jun 14, 2020

Eli The query that shows that the end point not installed is as below:

 

*removed data that are our environment specific.

 

ProtectionStatus
| where (ComputerEnvironment != "Azure" or isempty(ResourceId)) and (TypeofProtection == "Malicious Software Removal Tool" or TypeofProtection == "No Anti-Malware Tool was detected")
| where tolower(SubscriptionId) in ("SUBSCRIPTION_ID") or isempty(SubscriptionId)
| summarize AggregatedValue = count() by Computer
| limit 1000000000
 
With the query you gave:
ProtectionStatusRank450
ProtectionStatus
Not Reporting
ProtectionStatusDetails
Not reporting - Unable to collect data
SignatureVersion
Unknown
TypeofProtection
Malicious Software Removal Tool
ComputerEnvironment
Non-Azure
Type
ProtectionStatus
Eli's avatar
Eli
Icon for Microsoft rankMicrosoft
Jun 14, 2020
Not Reporting means just that. How is the Heartbeat?