5,571 questions
Do you have a compliance policy setting configure for MDE risk score? If yes, then this behaviour is expected. Either you onboard the device onto MDE(License required) or remove the requirement from the compliance policy. Also, looks like you may be missing a policy for enabling Defender AV as well.