Get-CimInstance -Namespace root\SecurityCenter2 -Class AntiVirusProduct ---> Not workong on Windows server 2016

hooked 1 Reputation point
2021-07-29T18:24:42.32+00:00

Hi
I am trying to fetch the installed AV/EDR software on Windows Server 2016,
I tried to execute Get-CimInstance -Namespace root\SecurityCenter2 -Class AntiVirusProduct
The namespace does not exist.

How can i fetch is properly?

Thanks!

Windows Server 2016
Windows Server 2016
A Microsoft server operating system that supports enterprise-level management updated to data storage.
2,401 questions
{count} votes

1 answer

Sort by: Most helpful
  1. hooked 1 Reputation point
    2021-08-03T23:01:21.177+00:00

    For Windows Server 2016 the EDR Block mode not supported,
    From MSDN
    Currently, running Microsoft Defender Antivirus in passive mode is not supported on Windows Server 2016
    Get-MPComputerStatus | select AMRunningMode returns empty

    I will get Windows Server 2019 to check.

    In addition for the Windows Server 2016 I see defender is installed and running, but still powershell throwing exception :(

    120296-windowsdefender2.png

    120303-windowsdefender.png

    0 comments No comments