Passive mode is showing in console but active mode at Server

Copper Contributor

Hi all,


on some Devices (Linux + Windows Server) we saw in the Defender for Endpoint console under Device Overview this entry:


but running MDATP health we get this information:


and also in the picture below real_time_protection_enabled is showing as false. There is no 3rd party Solution installed.

Why could this happen and how avoid this wrong information?



1 Reply
before using defender for endpoint were you using any 3rd party antivirus?