Share via

MDE Extension not getting installed

Shinde, Balaji 116 Reputation points
2024-08-20T08:28:25.57+00:00

Defender-MDE

Hi All,

We have enabled option inside the Microsoft defender for cloud to install the MDE extension and onboard the systems automatically to MDE portal. We have windows 10 22H2 multi session VMs running as AVD session hosts. But we don't see MDE extension being installed and MDE portal shows "can be onboarded" for these systems.

Any idea how to troubleshoot this?

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,420 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
48 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Marilee Turscak-MSFT 36,886 Reputation points Microsoft Employee
    2024-08-23T23:43:13.81+00:00

    Hi @Shinde, Balaji ,

    Make sure the auto-provisioning setting is enabled (Defender for Cloud > Environment settings > settings > auto provisioning > log analytics agent). Ensure also that Plan 1 or Plan 2 is also enabled for Defender for Cloud to allow the MDE integration. Missing these two settings commonly results in the extension not installing.

    Make sure also that all of the prerequisites are met: https://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-defender-for-endpoint

    If you still are not able to install the MDE extension it would help to share any errors you see while trying to install the extension.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.