Forum Discussion
Konrad_P630
Jan 23, 2023Copper Contributor
Microsoft Defender onboarding issues
In our organization we are using Microsoft Defender 365 as our main AV and EDR solution. Most of our machines are onboarded using SCCM/GPO but in some parts of organization those are managed manuall...
yongrheemsft
Microsoft
Jan 25, 2023Konrad_P630 on the 'manual' onboarding environment, please make sure that you delete all the current 'onboarding packages'. Why? CVE-2022-23278 (March 8th, 2022)
And then share the new (as of March 2022) 'onboarding package' to the folks doing the 'manual' onboarding.
Also, make sure that the image (e.g. sysprep or sccm task sequence) is not onboarding MDE before the image is sealed.
If this symptom still persists, please grab a aka.ms/MDEClientAnalyzer and open a MSFT Security MDE support ticket.
Thanks,
Yong Rhee - MSFT
And then share the new (as of March 2022) 'onboarding package' to the folks doing the 'manual' onboarding.
Also, make sure that the image (e.g. sysprep or sccm task sequence) is not onboarding MDE before the image is sealed.
If this symptom still persists, please grab a aka.ms/MDEClientAnalyzer and open a MSFT Security MDE support ticket.
Thanks,
Yong Rhee - MSFT