Duplicate entries in Defender ATP

Jeremy B 1 Reputation point


Thanks in advance for any information on this issue.

As you can see we have duplicate entries in the Security Center showing up. In the below example, there are 4 total entries for this VM. These VMs are deployed through a pipeline. For some reason some are showing up in the workgroup, some are domain joined. The top 2 are domained and you can see the bottom 2 are not. I've purposely marked through any sensitive information but any help on this is happening is appreciated. My thought is that initially through the pipeline they are onboarded and onboarded as workgroup and when they are domained and the GPO hits them, they onboard again but I may be wrong.


Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,780 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Omar Gutierrez 6 Reputation points

    Any update about this ?

    1 person found this answer helpful.
    0 comments No comments