Forum Discussion

Tiennes's avatar
Tiennes
Brass Contributor
Jul 08, 2021
Solved

Missing Azure Defender GPO Policies missing

  Hi Community,   I have a problem that I need your help with. I have deployed Azure Defender on Windows Server 2019 servers, running on Microsoft Azure. Azure Security Center is enabled on sub...
microsoft defender for cloud
  • Tiennes's avatar
    Tiennes
    Jul 21, 2021

    Hi Community!

     

    Meanwhile, I managed to fix this problem. For some reason, the proper admx/adml files were not placed in the SYSVOL\Policies\PolicyDefenitions folder. Maybe it's because of the template we have chosen from the Azure Marketplace or because the Domain- and Forest functional level is still on Windows Server 2008?

     

    My solution

    I have fixed this problem by downloadding the Administrative Templates (.admx) for Windows 10 1809 (since 1809 is for Windows Server 2019) and placed the following files in the Central Store (SYSVOL\Policies\PolicyDefenitions):

     

    • WindowsDefender.admx
    • WindowsSecurityCenter.admx
    • SmartScreen.admx
    • AppHVSI.admx

    I have of course placed the language (.adml) files in the SYSVOL\Policies\PolicyDefenitions\en-US folder. After reopening the GPMC I've got the right policies in place.

     

    If you are running into this problem, you now know a possible fix.

     

Tiennes's avatar
Tiennes
Brass Contributor
Jul 08, 2021

As I continue to troubleshoot, I notice that my ForesMode is running on Windows2008Forest and that the Domain Functional Level is running on Windows Server 2008.

 

ForestMode

 

 

Domain Functional Level

 

 

I think that this is maybe part of the problem because the missing policies are part of Windows 10 (and therefore Windows Server 2019). Hence, the Central Store from the Group Policy is missing the Windows Server 2019 templates, could that be the cause of my problem?

Tiennes's avatar
Tiennes
Brass Contributor
Jul 08, 2021
I have tried to copy the WindowsDefender.admx and WindowsSecurityCenter.admx from a working environment to the this environment, but no GPO policies are being added to the GPO. I have also downloaded the Windows 10/Windows Server 2019 admx files from the docs.microsoft.com and copied the same admx (and of course the language files) into the SYSVOL\Policies\PolicyDefenitions, but the same outcome; No new policies are visible in the Central Store.

Someone an idea?