Deploy ATP to Windows server 2016 1607

asked 2020-08-26T14:42:13+00:00
Belan Marek 46 Reputation points

Hi all

i folow this guide https://learn.microsoft.com/en-us/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection
Download package, get key and ID, put to MECM and deploy to servers.

We have SCOM 2019 UR2 on all servers.
On log file i find :
WorkspaceId does not match the expected value.
ATPHandler: Mma Agent is not onboarded to the intended Workspace. The device needs to be offboarded before onboarding to a different Workspace.

When I put id and key to SCOM agent it connect and work:
20586-image.png

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
658 questions
{count} votes

1 answer

Sort by: Most helpful
  1. answered 2020-11-03T16:09:46.067+00:00
    SIMOS George 1 Reputation point

    From a total of 17 servers, only one onboarded without intervention, and this set is just for the testing phase.
    The documentation is not good and there is no good troubleshooting support too.

    No comments