Feb 08 2021 06:33 AM
Hi,
I need to get a report of machines with status of Windows Defender Antivirus (Active or Passive).
As per the document -https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/symantec-... it says to run Get-MpComputerStatus cmdlet in Powershell and check the value for AMRunningMode.
When I ran this on a machine where a 3rd party AV was installed with Windows Defender AV running in passive mode, I got the value Normal under AMRunningMode instead of Passive.
Is there any other way we can get the status of Windows Defender AV from MDATP Security Center or Intune.
Aug 25 2021 08:05 AM
@AnuragSrivastavaCurrently having the same issue. Cannot find anything else in the documentation to suggest any other methods to determine MDE's status.
Why it isn't showing as Passive when a 3rd party AV solution is present (as per MS documentation) is beyond me.
Aug 25 2021 10:44 PM
Aug 26 2021 02:18 AM
Jun 16 2022 02:08 AM
Jun 29 2022 03:33 AM