This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hi all
i folow this guide https://learn.microsoft.com/en-us/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection
Download package, get key and ID, put to MECM and deploy to servers.
We have SCOM 2019 UR2 on all servers.
On log file i find :
WorkspaceId does not match the expected value.
ATPHandler: Mma Agent is not onboarded to the intended Workspace. The device needs to be offboarded before onboarding to a different Workspace.
When I put id and key to SCOM agent it connect and work:
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 44%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
@BelanMarek-4487 Is it windows server 2016 or Windows 10 1607 VM ? Is it on-prem or a Azure VM and are you getting this error in any specific server or all ?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 97%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESG%3C/text%3E%3C/svg%3E)
I have exactly the same problem, it seems to me that the implementation in SCCM is half-baked.
I will report it via the "send a smile/frown" option and will open a support case also at Microsoft.
The error is ridiculously vague.
From a total of 17 servers, only one onboarded without intervention, and this set is just for the testing phase.
The documentation is not good and there is no good troubleshooting support too.