Windows Defender ATP Reboot

%3CLINGO-SUB%20id%3D%22lingo-sub-1201677%22%20slang%3D%22en-US%22%3EWindows%20Defender%20ATP%20Reboot%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1201677%22%20slang%3D%22en-US%22%3E%3CP%20class%3D%22%22%3EI%20am%20having%20an%20issue%20with%20Windows%20Defender%20ATP%20on%20all%20my%20Windows%2010%2C%20domain%20joined%20PCs.%26nbsp%3B%20After%20running%20the%20on-boarding%20script%2C%20the%20registry%20is%20updated%20at%26nbsp%3B%3CSPAN%3EHKLM%5CSYSTEM%5CCurrentControlSet%5CControl%5CSession%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3EManager%5CPendingFileRenameOperations%20with%20a%20number%20of%20ATP%20files.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EAfter%20a%20reboot%2C%20this%20key%20is%20not%20reset%20so%20the%20PCs%20always%20think%20they%20need%20to%20be%20rebooted.%26nbsp%3B%20If%20I%20uninstall%20ATP%20the%20problem%20goes%20away.%26nbsp%3B%20Any%20suggestions%3F%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EThanks%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1457765%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Defender%20ATP%20Reboot%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1457765%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F80138%22%20target%3D%22_blank%22%3E%40Rob%20Nunley%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20a%20question%20for%20the%20Microsoft%20Defender%20ATP%20community%20which%20can%20be%20found%20here%3A%3C%2FP%3E%0A%3CP%3E-ERR%3AREF-NOT-FOUND-%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fmicrosoft-defender-atp%2Fbd-p%2FMicrosoftDefenderATP%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fmicrosoft-defender-atp%2Fbd-p%2FMicrosoftDefenderATP%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks!%3C%2FP%3E%0A%3CP%3E%3CBR%20%2F%3EJason%20Cohen%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

I am having an issue with Windows Defender ATP on all my Windows 10, domain joined PCs.  After running the on-boarding script, the registry is updated at HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations with a number of ATP files.

 

After a reboot, this key is not reset so the PCs always think they need to be rebooted.  If I uninstall ATP the problem goes away.  Any suggestions?

 

Thanks

1 Reply
Highlighted

@Rob Nunley 

This a question for the Microsoft Defender ATP community which can be found here:

https://techcommunity.microsoft.com/t5/microsoft-defender-atp/bd-p/MicrosoftDefenderATP

 

Thanks!


Jason Cohen