question

MichaelFry-1379 avatar image
0 Votes"
MichaelFry-1379 asked CBochynek answered

OnBoarding Windows Servers to Windows ATP

Hi All,

I have been onboarding Servers to Windows ATP by installing the Microsoft Management Agent, and pointing the agent at the Azure Workspace for ATP. This has worked for 19 of my 25 servers.

The remaining servers are showing a connection to the Azure workspace as successful, but are not appearing in ATP. I have gone through a number of steps based on the few articles I can find, but I can't see the issue with these servers.

I was wondering if anyone has had similar experiences and may be able to point me in the right direction?

Thanks
Michael

not-supported
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JamesTran-MSFT avatar image
0 Votes"
JamesTran-MSFT answered JamesTran-MSFT edited

@MichaelFry-1379
Thank you for the post! Since this has to do with Windows ATP and not Azure security center I've removed the "azure-security-center" tag from this thread. Additionally, it doesn't look like Windows ATP is supported on Microsoft Q&A as of right now - for a full list of supported products.

If you'd like to reach out to our Microsoft Defender for Endpoint team (the new name for Microsoft Defender Advanced Threat Protection), please reach out to our experts at their Microsoft Defender for Endpoint Tech Community page.


For more info - Access the Microsoft Defender for Endpoint Community Center


If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

CBochynek avatar image
0 Votes"
CBochynek answered

Hi Michael,

similar problem here.
Seems like some Server2016 (and 2012) not appearing in ATP.
The operations Manger log shows socket errors.
Winhttp proxy is set but it looks like it's not used. I can see the :80 and :443 packets in out firewalllog, nothing in proxylog.

If i open the ports 80/443 for one of the servers to any external IP, it appears in ATP.

Found nothing about this problem in the internet - searching for many days.

Greetings

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.