Server 2016 not onboarding

Brass Contributor

Hi all,

 

I have a strange issue and cannot find what i am doing wrong, i must be doing something wrong :)

I have a M365 E5 tenant and licenses and thus DFE.

On Server01 i install the new Unified DFE Agent and run the onboarding script and the machine appears in DFE Device Inventory, all is well.

 

But to showcase the differences between the new Unified Agent and the legacy MMA Agent possibilities i also want to onboard Server02 with the legacy MMA Agent.

 

So I created a Windows Server 2016 (gen1) VM in Azure (IaaS) and run WSUS to patch it to the latest patch level. Then in DFE i select "Windows Server 2008 R2 SP1, 2012 R2 and 2016 (using Microsoft Monitoring Agent)" and follow the instructions at the link below

 

https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/onboard-downlevel?view=o36...

 

During the installation i enter the Workspace ID and Workspace Key and the MMA installs successful and has the green checkmark in the Monitoring Agent.

 

But after waiting 24 hours the Server02 machine does not appear in DFE

Is installing only the MMA Agent sufficient ?

 

sc.exe query Windefend = Running

sc.exe query sense = not installed as service

Running the MDE Client Analyzer = SenseOms listener missing

 

0 Replies