Passive mode is showing in console but active mode at Server

[carlicht]

Hi all,

on some Devices (Linux + Windows Server) we saw in the Defender for Endpoint console under Device Overview this entry:

but running MDATP health we get this information:

and also in the picture below real_time_protection_enabled is showing as false. There is no 3rd party Solution installed.

Why could this happen and how avoid this wrong information?

Thanks

[#2]

before using defender for endpoint were you using any 3rd party antivirus?