We have the same problem on new installed machines. We have Check Point Endpoint Security Clients installed on Windows 10 1803 x64
Event ID 16 - Error while updating Windows Defender status to SECURITY_PRODUCT_STATE_ON!
I performed a clean install of Windows 10 April 2018 Update (created media using the Microsoft Media Creation Tool) on a brand new WD hard drive I bought and installed Norton Security!
Initially I didn't have any issues, but after some Windows 10 updates (not sure which one[s] specifically), Windows Defender is detecting and removing threats when it should be disabled since I have Norton Security installed! I could only access threat history by clicking on the notification warning me that threats has been detected and removed and not by opening Windows Defender which is problematic when Windows Defender removed false positives and the notifications have been cleared!!!
I also noticed a lot of errors in the Event Viewer with ID 16 that reads: "Error while updating Windows Defender status to SECURITY_PRODUCT_STATE_ON."
It seems to me that Microsoft released an update that re-enables and reinforces Windows Defender and it clearly causes issues when other Security products are installed!
Windows for home | Windows 10 | Security and privacy
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
6 answers
Sort by: Most helpful
-
Anonymous
2018-08-22T11:24:45+00:00 -
Anonymous
2018-05-29T21:18:35+00:00 I followed the instructions in the link you posted, and it didn't resolve my issues!
I now have the following errors in the Event Viewer:
SecurityCenter Event ID 3: "The Windows Security Center Service was unable to establish event queries with WMI to monitor third party AntiVirus, AntiSpyware and Firewall."
DistributedCOM Event ID 10016: "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscBrokerManager
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."
DistibutedCOM Event ID 10016: "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscDataProtection
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."
-
Anonymous
2018-05-29T21:02:44+00:00 thank you for your kind reply Arthur ,waiting for your feedback please, Best of luck to you
-
Anonymous
2018-05-29T20:57:46+00:00 Thank you for your swift response Malik!
Just to give you an update: I uninstalled Norton Security and restarted my computer! I again noticed the same errors occurring in the Event Viewer after the restart, I then reinstalled Norton Security and again got the same errors in the Event Viewer however, this time the error read: "Error while updatingNorton Security status to SECURITY_PRODUCT_STATE_ON." I then restarted my PC and opened Windows Defender Security Center only to find that Windows Defender Antivirus is active and it doesn't show Norton Security as the product installed! I once again got the previous error messages in the Event Viewer that reads: "Error while updating Windows Defender status to SECURITY_PRODUCT_STATE_ON."I will follow the instructions in the link you provided and provide feedback!
-
Anonymous
2018-05-29T20:48:19+00:00 Hi Arthur,
Sorry for the inconvenience caused to you,and thank you for your valuable question, I would suggest you to see Sumit Dhiman2's method and give it a try once if not tried before, in the below mentioned thread, I am hopeful that your query will be resolved, Of the issue persists kindly let me know.
https://answers.microsoft.com/en-us/windows/for...
Please let me know, if that helps and feel free to ask back any question.
Kind Regards:
Yasir