OnBoarding Windows Servers to Windows ATP

Michael Fry 1 Reputation point
2020-11-10T01:56:45.423+00:00

Hi All,

I have been onboarding Servers to Windows ATP by installing the Microsoft Management Agent, and pointing the agent at the Azure Workspace for ATP. This has worked for 19 of my 25 servers.

The remaining servers are showing a connection to the Azure workspace as successful, but are not appearing in ATP. I have gone through a number of steps based on the few articles I can find, but I can't see the issue with these servers.

I was wondering if anyone has had similar experiences and may be able to point me in the right direction?

Thanks
Michael

Not Monitored
Not Monitored
Tag not monitored by Microsoft.
35,522 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. JamesTran-MSFT 36,346 Reputation points Microsoft Employee
    2020-11-12T22:26:25.28+00:00

    @Michael Fry
    Thank you for the post! Since this has to do with Windows ATP and not Azure security center I've removed the "azure-security-center" tag from this thread. Additionally, it doesn't look like Windows ATP is supported on Microsoft Q&A as of right now - for a full list of supported products.

    If you'd like to reach out to our Microsoft Defender for Endpoint team (the new name for Microsoft Defender Advanced Threat Protection), please reach out to our experts at their Microsoft Defender for Endpoint Tech Community page.

    For more info - Access the Microsoft Defender for Endpoint Community Center

    If you have any other questions, please let me know.
    Thank you for your time and patience throughout this issue.

    0 comments No comments

  2. C.Bochynek 6 Reputation points
    2021-04-12T13:52:29.303+00:00

    Hi Michael,

    similar problem here.
    Seems like some Server2016 (and 2012) not appearing in ATP.
    The operations Manger log shows socket errors.
    Winhttp proxy is set but it looks like it's not used. I can see the :80 and :443 packets in out firewalllog, nothing in proxylog.

    If i open the ports 80/443 for one of the servers to any external IP, it appears in ATP.

    Found nothing about this problem in the internet - searching for many days.

    Greetings

    0 comments No comments