Hey
We have non persistent VDI and the VM's were updating at Start-up by downloading definitions from a UNC file share. This has worked fine until we then introduced the Defender ATP on-boarding script. The on-boarding script works (we can see the devices in the portal, albeit many duplicates, but we've since rectified this by using the 'single entry' method described in the MS kb) - however, the local VM's do not display their Defender engine status (as below) - and there's no indication that they are updating from the file share anymore?
attached are images from log file entries (are these expected)?
We're stuck can anyone help as to why the File share updating would stop working for Security center-enrolled devices?
