Windows Server 2016 x64 - unable to enable Defender Missing KB's

Okay, then we'll need to figure out how Defender was "killed" in the past, it seems it is not disabled the regular way!

What is the result of the following commands, maybe an exit code will reveal something?
Code: 
sc query WinDefend
sc qc WinDefend
 
I know, they have not made this easy. The clients estate is an absolute mess, that's for sure. It's very frustrating, must also be for you as your the one coming up with the magic ideas. Here the result of the above commands. Cheers

1717689638386.png
 
stinger007 said:
I checked a previous 2016 server I did manage to onboard and the key WinDefend is present (shown below)
Click to expand...

Please provide the following files from this server:
Code: 
WMIC SERVICE GET caption, name, startmode, state > "%userprofile%\desktop\services.txt"
reg save "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services" "%userprofile%\Desktop\Services.hiv"
 
Thanks, I will look at these files tomorrow, I'll need to compare some things with a server here.
 
Goog morning,

Please run the following script to replace the Windows Defender services.

Warning: This fix was written specifically for this system. Do not run this fix on another system.
  • Save any work you have open, and close all programs.
  • Download the attachment SFCFixScript.txt and save it to your desktop.
  • Drag the SFCFixScript.txt file over the SFCFix.exe executable and release it.
650ef5dbdfd06-62151e1bebac4-SFCFix-Txt-Eng.gif

  • SFCFix will launch, let it complete.
  • Once done, a file will appear on your desktop, called SFCFix.txt.
  • Post the logfile (SFCFix.txt) as attachment in your next reply.

Afterwards reboot the server to see if Windows Defender is started.

Code: 
sc query WinDefend
sc qc WinDefend
 

Attachments

Good morning mate,

Thanks for the above. Fix was run, server rebooted, WinDefend not running. I also tried to start the service on the off chance it may work, but no luck

1717750835070.png
 

Attachments

Last edited:
Please post also the result of SFCFix to see if the fix completed sucessfully.
 
Doh! sorry I attached the wrong file to the post. Previous post updated with SFCFIX.txt
 
Looking a little better, I've not rebooted yet. Want to check with you this time if its been fully successful
 

Attachments

Please run the following command first.
Code: 
WMIC SERVICE GET caption, name, startmode, state > "%userprofile%\desktop\services.txt"
 
I can see it below and also in services, it's not started at the moment shall I start? or reboot 1st? Cheers1717753745521.png

1717753832390.png
 

Attachments

Yes, but the other services are still missing. Please try to import them manually using the attached *reg files.
 

Attachments

Will do, I also spotted this the path to windefend doesn't yet match where the exe is located

1717754289406.png
 
We can look at that later, this because when the Windows Defender is started this platform folder should be recreated automatically.
 
You must log in or register to reply here.
Back
Top