Unable to apply ASR rules for Windows servers (2012R2,2016, 2019 and 2022) via SCCM

[Kosalar]

Hi, I have onboarded servers 2012 R2, 2016, 2019 and 2022 into the Microsoft Defender for Endpoint via a unified solution (I am not using MMA or AMA), All statuses are Active and onboarded in the www.security.microsoft.com console. These servers are managing through the SCCM and I could deploy the Antimalware policy for all servers. Still, I am unable to deploy ASR rules for the onboarded servers, I have tried manually configure rules into the servers. Still, when I run Get-MpPreference powershell command there are blank fields for ASR components. Any solution for this?

Note: These servers are not joined AAD.

[#2]

this appears to be a known problem with no known fix.
https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/enable-attack-surface-red...

[#3]

Hi @Jonhed,

Much appreciate your reply and let fingers cross and see until this fixed by MS 🙂

[#4]

@Kosalar 

Ok works now. That's what I did

find in policy Block Webshell creation for Servers and set it to ‘Not Configured’ 

need to investigate that, but in general without that setting works fine.

Please confirm from your side.

Regards

Adam

Could you pls check from your side, how you have configured below settings:

btw similar topic: ASR Policy "Not Applicable" - Microsoft Q&A