How to fix server not communicating to Defender : Event ID 49 / SENSE

Question

Hi team,

my server that is running on VM in Azure is experiencing some issues with reporting to Defender portal. It has a "Sensor state : Misconfigured". Not sure what could be wrong... I was doing some tshooting I've found online, and identified the below in Event Viewer

The VM is running Windows Server 2012.. and "Onboarding state" is showing "Onboarded"

How could I fix that?

Answer 1

Hi. Thank you for your question and reaching out. I’d be more than happy to help you with your query

It sounds like you are having trouble getting your server to communicate with Windows Defender. This could be caused by a number of issues, so it's important to try to narrow down the cause of the problem.

First, check that Windows Defender is enabled in the Windows Firewall, and ensure that all necessary ports are open and unblocked. Then, make sure that the service is running and can be accessed from the server. You can do this by running the Windows Defender Service Manager and enabling the services.

Next, make sure that Windows Defender is up to date and that any necessary updates have been installed. You can also try running a full scan of the server using Windows Defender and make sure that no malicious files can be detected. Finally, you can attempt to reinstall Windows Defender to see if that resolves the issue.

If none of the above steps work, it may be necessary to contact Microsoft support to get further assistance in resolving the issue. I hope this helps you get your server communicating with Windows Defender!

If the reply was helpful, please don’t forget to upvote or accept as answer, thank you.