Microsoft Defender Exploit Guard - Event Forwarding

%3CLINGO-SUB%20id%3D%22lingo-sub-1952257%22%20slang%3D%22en-US%22%3EMicrosoft%20Defender%20Exploit%20Guard%20-%20Event%20Forwarding%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1952257%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Folks%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ewe%20enabled%20Event%20Forwarding%20for%20ASR%20Rules%2C%20Network%20Protection%20and%20Controlled%20Folder%20Access.%20Events%20are%20arriving%20on%20Windows%20Server%202019%26nbsp%3B%20with%20following%20details%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3EThe%20description%20for%20Event%20ID%201123%20from%20source%20Microsoft-Windows-Windows%20Defender%20cannot%20be%20found.%20Either%20the%20component%20that%20raises%20this%20event%20is%20not%20installed%20on%20your%20local%20computer%20or%20the%20installation%20is%20corrupted.%20You%20can%20install%20or%20repair%20the%20component%20on%20the%20local%20computer.%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20this%20because%20on%20Server%202019%20Exploid%20Guard%20does%20not%20exist%20and%20he%20can't%20translate%20the%20event%3F%3C%2FP%3E%3CP%3EAny%20hints%20how%20to%20fix%20it%26nbsp%3Beven%20if%20it%20is%20only%20a%20cosmetic%20intervention%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThx%20Mario%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1952257%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
New Contributor

Hi Folks,

 

we enabled Event Forwarding for ASR Rules, Network Protection and Controlled Folder Access. Events are arriving on Windows Server 2019  with following details:

 

The description for Event ID 1123 from source Microsoft-Windows-Windows Defender cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

 

Is this because on Server 2019 Exploid Guard does not exist and he can't translate the event?

Any hints how to fix it even if it is only a cosmetic intervention?

 

Thx Mario

0 Replies