MZ@ !L!This program cannot be run in DOS mode. $;=ߍZSZSZSӬZSQZSRichZSPEdX=" ,@` 4(8.rdata@@.rsrc  @@X= lPPX=$8.rdata8.rdata$voltmdP.rdata$zzzdbg .rsrc$01(.rsrc$02 {UMZg-゚ɘX=0H %(?@EXFpGHLRS~0H`x9x 8Ph34r(@X*p*********** *0*@*P*`*p*********** *0*@*P*`*p*******'(X*,44./142`2p58N <@`?LBVDU@e<|j0oPvX|,}zPL p | H$Hl (tt  .*xd! &8.1MUISE "ƚaֶn MUI vi-VNti yKhng pht hin thy s c.Khng c thng tin chi tit.D liu h tr:Mc  tc ngang tm xutTi liu tham khoPhn hiDanh mc Phn tchLi Ca nh bao C thng tinChuyn i dn hngPA$Bo co phn tch chn on Defender Tng quanTruyn thng mng Trin khai Trin khaiSc kheCp nhtS c v hiu sutCc s c v cu hnhCFATr gipASR Khng p dngCha t cu hnh%1 gi Hng ngyCh NhtTh HaiTh BaTh TTh NmTh SuTh By Khng bao giKim tra truyn thng mngKim tra trin khai MDEKim tra trin khai MDE!Kim tra tnh trng tnh nng MDEKim tra MDE cp nhtKim tra hiu nngKim tra cu hnh,Kim tra CFA (Truy cp th mc c kim sot))Kim tra ASR (Gim thiu b mt tn cng) ttChnKim tra Khng c snCKHNGDch v %1 khng c Khng c snTra#ng thai khng xac i#nh Quy trnhTp ang chya dng  tm dngBt u ch x lDng ch x lang ch tip tcang ch tm dngKhng xc nh Khi ng H# thngT ngTh cng tt Bnh thngCh  th ngCh  th ng SxSCh  chn EDRCh  kim tra th ng Khng chyPAKt quKt qu8Nhp vo lin kt Phn tch  xem chi tit cc kt qu. Thng tin my Thng tin myVMNameKch thc my o V tr my o M ng kNhm ti nguynVmIdPhin bn h iu hnhS liS b x l logicLung trn mi li B nh thcV tr tp trang"Mc s dng hin ti ca tp trang+Kch thc c s c phn b cho tp trang"Mc s dng cao im ca tp trang tham gia min tham gia Azure AD tham gia ni lm vicID thit b Azure ADTrng thi ng kKin trc h iu hnhThi gian khi ng h thngProxy WinHTTP ton h thng'Thit b  c ng k vi AAD v MEM7Thit b cha c ng k v cha bao gi c ng k&Thit b c qun l bi tc nhn MDM'Thit b c qun l bi tc nhn SCCM)S c cu hnh Microsoft Endpoint ManagerLi t ng quat S c kt ni*Thit b  ng k v hin  hy ng kThit b ang ch hy ng kLi gn chnh schPALi bo co chnh schLi kt ni chungi tng thu khng khp"Li kt hp  im kt ni dch vLi chng chi Cu hnh sai Kt ni AADLi DNSS c ng b ng hMDE v ConfigMgrLn th ng k gn nht Ln ng k cui cng thnh cng0Ln ti ln d liu o t xa thnh cng gn nht4Bo v mng c h tr Uris (ln sa i cui cng)ECc Uri c h tr ty chnh ca bo v mng (ln sa i cui cng)PAEDRThng tin SensePhin bn SenseTrng thi dch v Sense Id t chc ID thit bGUID trng thi chng gi mo"Trng thi dch v DiagTrack (UTC)$ trin khai kh nng chng gi moPhin bn cu hnh SenseID xc thc my Kiu khi ng ca dch v Sense!V tr trung tm d liu thit b/Thit b c trin khai qua kt ni hp l haHKiu khi ng Chng trinh tr# giup ng nh#p tai khoa n Microsoft Defender AVThng tin Defender AVTrng thi dch v Defender AVPhin bn nn tng Defender AV,Phin bn thng minh bo mt AV ca DefenderPhin bn cng c Defender AVCh  Defender AV/Cu hnh ty chn SSL AV ca Microsoft Defender(Cu hnh proxy AV ca Microsoft Defender,Trng thi dch v Trung tm bo mt Windows+Trng thi dch v sc khe bo mt WindowsPA)Trng thi Dch v Kim tra Mng Defender'Trng thi dch v ct li ca Defender"Defender c bo v chng gi mo)Ngun bo v chng can thip ca Defender.Cc loi tr bo v chng gi mo ca DefenderCh  SmartLocker!Phn mm chng gin ip DefenderCh  Bo v Mng ca DefenderPA|Vui lng xem li cu hnh mng ca bn v m bo cc URL bt buc khng b chn.  bit thm thng tin, hy tham kho: %1 URL dch v{ hon tt thnh cng kt ni th nghim vi URL dch v m my Microsoft Defender cho im cui (CnC). %1 vi %2 kt quKim tra kt ni vi URL dch v m my Microsoft Defender cho im cui (CnC) khng thnh cng. Kim tra khng thnh cng i vi URL sau: %1 vi %2 kt quTt c cc kt ni th nghim ti URL dch v m my Microsoft Defender cho im cui (CnC) u khng thnh cng. Kim tra khng thnh cng i vi URL sau: %1 vi %2 kt quKim tra kt ni n cc URL dch v m my Microsoft Defender cho im cui (Cyber)  hon tt thnh cng. %1 vi kt qu %2Kim tra kt ni vi URL dch v m my Microsoft Defender cho im cui (Cyber) khng thnh cng. Kim tra khng thnh cng i vi URL sau: %1 vi %2 kt quTt c cc kt ni th nghim ti URL dch v m my Microsoft Defender cho im cui (Cyber) u khng thnh cng. Kim tra khng thnh cng i vi URL sau: %1 vi %2 kt qu~ hon tt thnh cng kt ni th nghim vi URL dch v m my Microsoft Defender cho im cui (AutoIR). %1 vi %2 kt quKim tra kt ni vi URL dch v m my Microsoft Defender cho im cui (AutoIR) khng thnh cng. Kim tra khng thnh cng i vi URL sau: %1 vi %2 kt quTt c cc kt ni th nghim ti URL dch v m my Microsoft Defender cho im cui (AutoIR) u khng thnh cng. Kim tra khng thnh cng i vi URL sau: %1 vi %2 kt qu hon tt thnh cng kt ni th nghim vi URL dch v m my Microsoft Defender cho im cui (SampleUpload). %1 vi %2 kt quKim tra kt ni vi URL dch v m my Microsoft Defender cho im cui (SampleUpload) khng thnh cng. Kim tra khng thnh cng i vi URL sau: %1 vi %2 kt quTt c cc kt ni th nghim vi URL dch v m my Microsoft Defender cho im cui (SampleUpload) u khng thnh cng. Kim tra khng thnh cng i vi URL sau: %1 vi %2 kt qu hon tt thnh cng kt ni th nghim vi URL dch v m my Microsoft Defender cho im cui (MdeConfigMgr). %1 vi %2 kt quPAKim tra kt ni n cc URL dch v m my Microsoft Defender cho im cui (MdeConfigMgr)  tht bi. Kim tra khng thnh cng i vi URL sau: %1 vi kt qu %2Tt c cc kt ni th nghim ti URL dch v m my Microsoft Defender cho im cui (MdeConfigMgr) u khng thnh cng. Kim tra khng thnh cng i vi URL sau: %1 vi %2 kt qu| hon tt thnh cng kt ni th nghim vi URL dch v m my Microsoft Defender cho im cui (OneD). %1 vi %2 kt quKim tra kt ni n cc URL dch v m my Microsoft Defender cho im cui (OneDs)  tht bi. Kim tra khng thnh cng i vi URL sau: %1 vi kt qu %2Tt c cc kt ni th nghim ti URL dch v m my Microsoft Defender cho im cui (OneDs) u khng thnh cng. Kim tra khng thnh cng i vi URL sau: %1 vi %2 kt quUXc thc chng ch cho dch v m my Defender cho im cui  hon tt thnh cng.*Vic thu hi chng ch cha c kim tra.=Kt ni m my c th b gin on do li thu hi chng ch.Vui lng m bo cc URL sau khng b chn: %1 v %2.  bit thm thng tin, vui lng tham kho %3.  bit thng tin chi tit v li, hy xem li %4.g hon tt thnh cng qu trnh kim tra kt ni vi dch v m my ca Microsoft Defender Antivirus.SKim tra kt ni vi dch v m my Microsoft Defender Antivirus khng thnh cng.SNu Microsoft Defender Antivirus l gii php chng virus chnh ca bn hoc bn  chn bt Ch  chn EDR, vui lng m bo rng cc kt ni n URL m my ca AV khng b chn.  bit thm thng tin chi tit, vui lng tham kho: https://learn.microsoft.com/defender-endpoint/configure-network-connections-microsoft-defender-antivirus5Kt ni mng hin ti khng tnh ph theo dung lng.7Kt ni mng hin ti c tnh ph theo dung lng. %1Mng o c c th hn ch chc nng trong giao tip MAPS ca B bo v, v d: yu cu ch k khn cp khng c gi (cn thit cho cc ch bo ty chnh bn cnh ch k khn cp).Sp t gii hn d liu: %1PAVt gii hn d liu: %1Chuyn vng: %1Loi chi ph mng: %1 hon tt thnh cng kt ni kim tra vi URL dch v m my Microsoft Defender cho im cui (cu hnh ECS). %1 vi %2 kt quKim tra kt ni vi dch v m my Microsoft Defender cho im cui (cu hnh ECS) tr v HTTP 502 Cng kt ni khng hp l. y l s c gin on  bit vi Cng kt ni ng dng Azure v c th t gii quyt. Th kim tra li nu iu ny vn tip din. %1 vi %2 kt quTt c cc kt ni th nghim ti URL dch v m my Microsoft Defender cho im cui (cu hnh ECS) u khng thnh cng. Kim tra khng thnh cng i vi URL sau: %1 vi %2 kt qumNu bn nh bt Qun l cu hnh bo mt MDE, vui lng tham kho ti liu sau  bit danh sch cc yu cu.Nn tng c h trQThit b khng c mc v ti thiu  trin khai Qun l Cu hnh Bo mt MDE: %1Thit b  ci t vai tr Dch v Tn Active Directory. H tr cho B kim sot min hin ang  dng xem trc v yu cu cu hnh b sung.qNu bn c nh kch hot Qun l cu hnh bo mt MDE cho B iu khin min, vui lng tham kho ti liu sau.6S dng qun l ci t bo mt trn b kim sot minThit b ang chy h iu hnh 32 bit, h iu hnh ny khng c h tr cho qu trnh trin khai Qun l cu hnh bo mt MDE.lVui lng lu rng phin bn h iu hnh ca thit b khng c MDE h tr v khng th c tch hp: %1TVui lng tham kho bi vit ny  bit danh sch cc phin bn Windows c h tr.>%1 trn thit b ny khng chy  Cp  Bo v c mong i. bit thm thng tin v bo v PPL v ti sao n li quan trng, hy tham kho ti liu ny. Lin h vi b phn h tr ca Microsoft nu s c vn tip din.PPLVui lng lu rng phin bn my ch ch Hyper-V c ci t trn thit b ny khng c MDE h tr v khng th trin khai: %1[Vui lng tham kho ti liu h tr MDE  bit danh sch cc phin bn my ch c h tr.!Cc phin bn Windows c h trDch v MDE SenseDch v MDE AV WindefendDch v bo mt Windows WscSvc Dch v Bo mt Sc khe Windows Dch v bo v mng MDE WdnisSvcDch v ct li MDE Defender4 bit thm thng tin, vui lng tham kho bi vit.Xin lu rng my ny ang chy vi phin bn Nn tng B bo v  li thi. Cc phin bn nn tng ci hn N-2 s khng cn c h tr.2Nn tng chng phn mm c hi Microsoft Defender%Xin lu rng my ny ang chy phin bn cng c Defender Antivirus  li thi. Sau khi phin bn gi mi c pht hnh, dch v h tr cho hai phin bn trc ch cn  mc h tr k thut. Cc phin bn ci hn c lit k trong phn ny v ch c cung cp  h tr nng cp k thut.&Cng c chng virus Microsoft DefenderXin lu rng my ny ang chy phin bn bo mt thng minh  li thi. Bn nn p dng phin bn bo mt thng minh mi nht  m bo kh nng bo v v tng thch ti u./Cp nht phn mm dit virus Microsoft DefenderFMc s dng CPU cao ca Sense c ghi nhn do lu lng NDR ca Sense@Hy th p dng cc ngoi l Sense EDR cho cc quy trnh sau: %1S dng CPU caoRNn tng MDE gp phi tnh trng s dng b nh cao vi cc phin bn MDE hin tiMc s dng b nh caoLi cp nht nn tng MDELi cp nht cng c MDELi cp nht ch k MDEACp nht ch k MDE khng thnh cng v  c phin bn ang chy{Hy i cho n khi tt c cc tin trnh Instances ca MpSigStub.exe kt thc hon ton trc khi th cp nht ch k li.HDch v MDE Windefend khng khi to thnh cng v b kt  giai on %1tKhi ng li my v cp nht ln nn tng b bo v mi nht v nu s c vn tip din, hy bo co cho Microsoft.JDch v MDE Windefend  khng th tt thnh cng v b kt  giai on %1_Cp nht ln nn tng b bo v mi nht v nu s c vn tip din, hy bo co cho Microsoft.XCc tham chiu loi tr MDE  cp n bin mi trng (%1) khng phi l bin h thng.uVui lng xem li cc trng hp loi tr ca bn: '%1'  m bo chng tham chiu n cc bin mi trng chnh xc.PA2Khng th truy xut ty chn Defender ca Windows.qNu bn d nh trin khai Qun l cu hnh thit b MDE, vui lng tham kho bi vit sau  bit thm thng tin.JXc minh rng dch v B bo v Windows ang chy v c th truy cp c.:Cu hnh Microsoft Defender Antivirus bng Chnh sch NhmYu cu kt niEt cu hnh kt hp Azure Active Directory cho cc min c qun lCng thng tin Bo mt M365]Khc phc s c trin khai lin quan n Qun l bo mt cho Microsoft Defender cho im cuiKha chnh sch MDE mc nh"Kha dch v cm bin MDE mc nh+ng dn th mc b nh cache MDE mc nh&ng dn th mc Cyber MDE mc nhng dn th mc MDE mc nh.ng dn th mc ProgramData mc nh ca MDE'ng dn th mc Tm thi MDE Mc nh&ng dn th mc du vt MDE mc nhsXa cc kha ng k lin quan n AntiSpoofing  buc thit b to kha ring t mi v ng k li. Chy lnh %1Khng c g  lm. Trong khong thi gian bt u Cyberthrottling, nhn bit s kin d liu mng khng c chuyn vo cng thng tin MDATP.Thit b ny  c gng trin khai thng qua tc nhn Microsoft Monitoring Agent (MMA) nhng khng thnh cng v thit b khng h tr trin khai bng phng php ny.~Vui lng tham kho ti liu trc tuyn ca chng ti  hiu phng php trin khai ph hp vi H iu hnh ca thit b ny.Cu hnh h tr trin khai MDE7My c lin kt vi mt ID i tng thu AAD c th.Vui lng m bo rng ID i tng thu AAD t i tng thu MDE ca bn khp vi ID i tng thu SCP c lit k  trn.  xem Nhn dng i tng thu MDE ca bn, vui lng tham kho Cng thng tin bo mt M365PA@Thit b c kh nng chng gi mo v ang  trng thi n nh.OSharedSignatureRoot  c cu hnh v c th truy cp bi ti khon H THNG./Cu hnh SharedSignatureRoot c v bnh thng.OGi tr ng k SharedSignatureRoot cha c cu hnh hoc khng th truy cp.my l thng tin - hy xc minh xem cu hnh SharedSignatureRoot c ph hp vi mi trng ca bn hay khng.!Cu hnh lch cp nht ch k: %1?Lch k tn theo ngy: %1, Khong thi gian cp nht ch k: %2LXem li ci t lch cp nht ch k ca bn nu cn cho mi trng ca bn.CCu hnh lch qut cho Tnh nng Chng Virut ca Microsoft Defender.SignatureDefinitionUpdateFileSharesSources: %1NXem li ci t ngun chia s tp ch k nu cn thit cho mi trng ca bn.Th t d phng ch k: %1HXem li thit t th t d phng ch k nu cn cho mi trng ca bn.Vui lng lu rng my ny c chnh sch ch cho php thm cc nh xut bn ng tin cy da trn tn min. iu ny c th gy tr ngi cho cm bin MDE, vn cn ci t chng ch vo kho Nh pht hnh ng tin cy. bit thm thng tin, hy tham kho bi vit.  trnh cc s c khng mong mun, hy loi b cu hnh chnh sch nhm c lin kt: C Authenticode Cc b= %1, C Authenticode GP = %2.Nh xut bn ng tin cyPKhng th c im Kt ni Dch v (SCP) t phn vng cu hnh Active Directory.>im kt ni dch v (SCP) cha cu hnh khng c h tr: %1;im kt ni dch v (SCP) cha cu hnh khng c h tr.nKhng th kt ni thit b vi Azure AD v bn ghi SCP c cu hnh  kt ni thit b vi DRS Doanh nghip.]im Kt ni Dch v (SCP) khng c t cu hnh trong phn vng cu hnh Active Directory.ZKhng th kt ni vi B kim sot Min  truy xut thng tin im Kt ni Dch v (SCP).C s khc bit gia ID i tng thu AAD t i tng thu MDE ca bn v ID i tng thu trong Mc nhp SCP thuc min ca bn.Vui lng m bo rng ID i tng thu AAD t i tng thu MDE ca bn khp vi ID i tng thu SCP c lit k  trn.  xem M nh danh i tng thu MDE ca bn, hy tham kho ti liu.cThit b c qun l bi tc nhn SCCM v s khng c qun l bi gii php qun l bo mt MDE.eConfiguration Manager c cng nhn c thm quyn qun l bo mt duy nht. Defender cho im cui s khng qun l ci t bo mt trn cc thit b  c Configuration Manager qun l. Nu bn mun thay i hnh vi ny, hy t nt chuyn i ci t Qun l bo mt bng Configuration Manager thnh Tt. Tham kho ti liu sau  bit thm thng tin.CThit b c kh nng chng gi mo nhng cha  trng thi n nh.wVui lng tham kho cc hng dn trong bi vit sau. Lin h vi b phn h tr ca Microsoft nu s c vn tip din.1Microsoft Defender cho im cui - CVE-2022-232787Microsoft Defender cho im cui  Phn tch mi e da!Thiu cc ng dn mc nh: %1.Vui lng m bo (cc) ng dn b thiu c  cp tn ti v cha c i tn. Bn c th cn to (cc) th mc b thiu vi ng cnh h thng.UKhng th trin khai thit b ny thng qua Microsoft Endpoint Configuration Manager.rS c ny c th xy ra nu kha ng k %1 b thiu t: %2.  to kha ng k b thiu, bn c th s dng: %34Thit b ang bo co cho ID t chc  ht hn: %1.jBn nn hy trin khai thit b khi t chc ny, sau  trin khai thit b  cho t chc hin ti ca bn. Lin h vi b phn H tr ca Microsoft nu bn khng c quyn truy nhp vo tp lnh xa khi h thng vi ID t chc c  cp. Lu :  xem OrgID hin ti, vui lng truy cp cng thng tin MDE v nhp vo tn ngi dng  gc trn cng bn phi.Trung tm bo mtiXin lu thit b c li "ang ti kha ring t cho chng ch xc thc my khch" trong nht k OpsMgr.Vui lng g ci t ri ci t li MMA (Microsoft Monitoring Agent) trn thit b ny v kim tra xem s c c tip din khng.;Gi a phng trn thit b khng khp vi gi trn Azure.Vui lng kim tra xem thi gian h thng cc b c chnh xc khng v mi gi chnh xc  c t. Nu thit b ny  tham gia min, vui lng m bo rng dch v 'Windows Time' ang chy v thit b c ng b ha vi thi gian min ca bn.  bit thm thng tin v cch nh cu hnh v iu khin ng b ha thi gian, vui lng tham kho bi vit  m bo gi a phng trong BIOS l chnh xc.Thi gian WindowsNThit b ang chy phin bn ci hn ca System Center Endpoint Protection: %1.Bn nn nng cp ln phin bn mi nht sn c  m bo tng thch v cho php ghi nhn cc pht hin phn mm xu trong cng bo mt ca Defender cho im cui.7 xy ra li trong quy trnh qun l cu hnh bo mt. tch hp thnh cng thit b vo Microsoft Defender cho im cui. Tuy nhin,  xy ra li trong quy trnh qun l cu hnh bo mt. Nguyn nhn c th do thit b khng p ng cc iu kin tin quyt ca knh qun l Microsoft Defender cho im cui.9iu kin tin quyt cho Microsoft Defender cho im cui7 xy ra li trong quy trnh qun l cu hnh bo mt.Thit b  c trin khai thnh cng vo Microsoft Defender cho im cui. Tuy nhin, Microsoft Endpoint Manager cha c t cu hnh thng qua Trung tm Qun tr  cho php Cu hnh Bo mt Microsoft Defender cho im cui.2Cu hnh i tng thu Microsoft Endpoint Manager xy ra s c kt ni. tch hp thnh cng thit b vo Microsoft Defender cho im cui. Tuy nhin,  xy ra li trong quy trnh qun l cu hnh bo mt, c th do s c kt ni. Xc minh rng thit b c th giao tip vi cc im cui MDE.>im cui Azure Active Directory v Microsoft Endpoint ManagerLi kt ni Hybrid tng qut.  tch hp thnh cng thit b vo Microsoft Defender cho im cui. Tuy nhin,  xy ra li trong quy trnh qun l cu hnh bo mt v h iu hnh khng th thc hin kt ni kt hp. Tham kho cc lin kt  khc phc s c li kt ni kt hp cp h iu hnh.HKhc phc s c cc thit b c kt ni vi Azure Active Directory laii tng thu khng khp. tch hp thnh cng thit b vo Microsoft Defender cho im cui. Tuy nhin,  xy ra li trong quy trnh qun l cu hnh bo mt v ID i tng thu Microsoft Defender cho im cui ca bn khng khp vi ID i tng thu Azure Active Directory ca bn. m bo rng ID i tng thu Azure Active Directory t i tng thu Defender cho im cui ca bn khp vi ID i tng thu trong mc nhp SCP ca min.#Li kt hp - im kt ni dch v. tch hp thnh cng thit b vo Microsoft Defender cho im cui. Tuy nhin, bn ghi im kt ni dch v (SCP) khng c cu hnh ng v thit b khng th tham gia Azure AD. iu ny c th do SCP c cu hnh  tham gia Enterprise DRS. Hy m bo bn ghi SCP tr n AAD v SCP c cu hnh theo cc phng php tt nht.  bit thm thng tin chi tit, vui lng tham kho cc lin kt.Cu hnh im kt ni dch vLi chng chi . tch hp thnh cng thit b vo Microsoft Defender cho im cui. Tuy nhin,  xy ra li trong quy trnh qun l cu hnh bo mt do li chng ch thit b. Chng ch thit b thuc v mt i tng thu khc. Xc minh rng bn tun theo cc phng php hay nht khi to h s.H s chng ch tin cyCu hnh sai Kt ni AAD tch hp thnh cng thit b vo Microsoft Defender cho im cui. Tuy nhin,  xy ra li trong quy trnh qun l cu hnh bo mt do sai cu hnh trong AAD Connect.  xc nh nguyn nhn ngn thit b ng k vo AAD, hy cn nhc chy cc cng c khc phc s c.(Cng c khc phc s c ng k thit bKHng dn khc phc s c chuyn dng dnh ring cho Windows Server 2012 R2Li DNS. tch hp thnh cng thit b vo Microsoft Defender cho im cui. Tuy nhin,  xy ra li trong quy trnh qun l cu hnh bo mt do li DNS. Kim tra kt ni Internet v/hoc ci t DNS trn thit b. Ci t DNS khng hp l c th nm  pha my trm. Active Directory yu cu bn s dng DNS min  hot ng bnh thng (ch khng phi a ch ca b nh tuyn).  bit thm thng tin, hy tham kho cc lin kt.S c ng b ng h. tch hp thnh cng thit b vo Microsoft Defender cho im cui. Tuy nhin,  xy ra li trong quy trnh qun l cu hnh bo mt. Xc minh ng h c t chnh xc v ng b trn thit b ni xy ra li.&Ti xung chnh sch khng thnh cng. tch hp thnh cng thit b vo Microsoft Defender cho im cui. Tuy nhin, thit b khng th ti xung cc chnh sch bo mt im cui t MEM. Xc minh rng thit b c th giao tip vi cc im cui MDE.Li hy ng k.Thit b hin  c ng k nhng cn phi hy ng k. Tuy nhin, qu trnh hy ng k  khng thnh cng do li tm thi. Xc minh rng thit b c th giao tip vi im cui MDE.Li khi gn chnh sch.Thit b  c tch hp thnh cng vo Microsoft Defender cho im cui v c th ti xung cc chnh sch bo mt im cui t MEM. Tuy nhin,  xy ra li trong qu trnh ch nh cc chnh sch.Bo co li chnh sch.Thit b  c tch hp thnh cng vo Microsoft Defender cho im cui v c th ti xung cc chnh sch bo mt im cui t MEM. Tuy nhin,  xy ra li trong qu trnh bo co cc chnh sch cho MEM.eKhng th trin khai thit b ny  trng thi hin ti v ImageState bn trong '%1' cha hon chnh.S c ny c th xy ra nu hnh nh h iu hnh  thc hin nhiu ln th sysprep lin tip v s ng k c t thnh '%1'. Lin h vi b phn h tr ca Microsoft nu s c vn tip din.&Thng tin trng thi thit lp WindowsLGi tr ImagePath trong ng k c th  b can thip trc khi trin khai.iVui lng xem li li ny v kim tra ImagePath (trong vng %1)  m bo n tr n ng dn %2 hp l.9Pht hin cc s kin hn ch truy cp d liu mng SenseMDE v ConfigMgr)Thit b c qun l bng Configuration Manager v Microsoft Defender cho im cui. Vic kim sot chnh sch qua c hai knh c th gy xung t v to ra kt qu khng mong mun.  trnh tnh trng ny, cc chnh sch bo mt im cui nn c c lp trong mt mt phng kim sot duy nht.9Cng tn ti vi Microsoft Endpoint Configuration ManagerTrng thi ng k  thay iThit b c qun l bng Configuration Manager v Microsoft Defender cho im cui. Thit b  b hy ng k khi gii php qun l cu hnh bo mt v phm vi thc thi  thay i hoc th MDE-Management  b xa khi thit b.Bin mi trng h thng %%TEMP%% (v %%TMP%%) cha c nh ngh)a. iu ny c th gy ra li cho Windows Defender v cc thnh phn h thng khc da vo th mc tm thi.Xc nh cc bin mi trng h thng TEMP v TMP. Gi tr mc nh l %%SystemRoot%%\TEMP i vi cc ti khon h thng. Xc minh ng dn tn ti v c quyn ph hp.~Khng th truy cp th mc %%TEMP%%. iu ny c th gy ra li cho cc thnh phn ca B bo v Windows cn ghi tp tm thi.NXc minh rng th mc %%TEMP%% tn ti v ti khon hin ti c quyn c/ghi.Th mc %%TEMP%% c t thnh ng dn khng phi mc nh. ng dn TEMP phi tiu chun c th gy ra s c vi cc thnh phn gi nh v tr mc nh.Kim tra xem ng dn ty chnh %%TEMP%% c phi l c hay khng. Nu xy ra s c bt ng, hy t li cc bin mi trng h thng TEMP v TMP v gi tr mc nh (%%SystemRoot%%\TEMP i vi ti khon h thng).[Xin lu rng thit b c nhiu khng gian lm vic MMA (Tc nhn gim st ca Microsoft).1Nu thit b c trin khai vo B bo v dnh cho im cui thng qua tch hp ASC (cn gi l B bo v Azure cho my ch), th bn nn loi b khng gian lm vic MDE  trnh cc s c ti ln trn mng.  bit thm thng tin v tch hp ASC vi Defender cho im cui, vui lng tham kho bi vit.MDE trong AzurenKhng th trin khai my ny do thiu quyn i vi kha ng k HKLM_System_CurrentControlSet_Services_Sense.iu ny c th xy ra do s can thip t cc sn phm bo mt ca bn th ba hoc do ti khon SYSTEM thiu quyn kim sot y  cho HKLM_System_CurrentControlSet_Services_Sense. Cc quyn c tm thy cho ti khon SYSTEM l: %1KXin lu rng my ch ny khng c ci t tc nhn thng nht hin i.Tc nhn hp nht dnh cho my ch cp thp cha c ci t trn thit b ny. Bn nn ci t tc nhn mi  c hiu sut v kh nng bo v ti u.  bit thm thng tin, hy tham kho ti liuGTrin khai my ch Windows cho dch v Microsoft Defender cho im cui; xy ra li gn chnh sch do cc bin mi trng sau: %1Thit b  c tch hp thnh cng vo Microsoft Defender cho im cui v c th ti xung cc chnh sch bo mt im cui t MEM. Tuy nhin,  xy ra li trong qu trnh gn cc chnh sch. Vui lng xa mi ng dn khng tn ti khi bin mi trng h thng  trn.<Thit lp cc bin mi trng trong Bng iu khin h thngd xy ra li gn chnh sch v Lp lch trnh Chia s Cng bng ng (DFSS) c bt trn thit b.@Thit b  c tch hp thnh cng vo Microsoft Defender cho im cui v c th ti xung cc chnh sch bo mt im cui t MEM. Tuy nhin,  xy ra li trong qu trnh gn cc chnh sch do gii hn API c th xy ra khi bt DFSS. Vui lng lin h# vi b# ph#n h tr# ca Microsoft   #c tr# giup.GThit b cha c cp nht v cha trin khai chc nng chng gi mo.Vui lng m bo bn trin khai bn v bo mt c  xut  bo v thit b khi gi mo.  bit thm thng tin, hy tham kho cc lin kt.1Microsoft Defender cho im cui - CVE-2022-232787Microsoft Defender cho im cui  Phn tch mi e daYThit b ang chy vi phin bn ci ca cm bin EDR ca Microsoft Defender cho im cuiOVui lng cp nht cm bin  m bo bn c kh nng bo v v n nh ti u.CBn cp nht Microsoft Defender cho im cui dnh cho cm bin EDRwMy ny khng trin khai c v MsSense.exe  gp s c trong giai on khi to cho TelLib.dll. Li t s c l: %1iu ny c th xy ra nu ti khon H THNG khng c quyn ghi vo ng dn d kin (ProgramData\Microsoft\Tnh nng Chng Mi e da Nng cao ca B bo v Windows\Cyber). Vui lng xc thc ACL trong ng dn v t li quyn t th mc cha m nu cn.OThit b c kh nng chng gi mo nhng cha c ng k vi dch v m my.Vui lng m bo kt ni n cc URL EDRCloud CnC khng b chn. Lin h vi b phn h tr ca Microsoft nu s c vn tip din.AMt cu hnh hoc phn ph thuc ang ngn Bo v Mng khi ng.MVui lng xem li thng bo li ny  hiu s c chn v gii quyt s c: %1sMt m TLS c h tr khng c bt trn my ny. iu ny c th nh hng n kh nng kt ni vi m my MDE.Vui lng kim tra cc thut ton m ha  cu hnh (trong HKLM\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002)  m bo chng cha cc thut ton m ha ti thiu cn thit cho kt ni vi m my MDE.B m ha v cc yu cu TLSxGiao thc my khch TLS 1.2 khng c bt trn my ny. iu ny c th nh hng n kh nng kt ni vi m my MDE.Vui lng xc nhn rng my khch TLS 1.2  c bt (trong HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client).gMt m ECDH cha c bt trn my ny. iu ny c th nh hng n kh nng kt ni vi m my MDE.Vui lng xc nhn rng ECDH KeyExchangeAlgorithm  c bt (trong HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\ECDH).$Kim tra URL c bn khng thnh cngThnh phn NetworkProtection b v hiu ha hoc kim tra kim tra URL khng thnh cng. iu ny c th cho thy s hin din ca mt cng c chuyn hng mng (V d: Cisco Umbrella).(uW\WcO pT %  +>Q 8 HcI7 S7YT BOU I_ Tc (%1). /.!WMeWa _ ' a a  jm2O!! O cY  cRq!= B[ : > %>UB, aM gO8 YBc a[ Aa [ 38B)8 O< B>']c ? D g .!BYm/ gR UB 7[Kg . hHUe0@< c[.! QYBY, O M)Y WB a Wc Q B97U 9cYB[/UOEQ_ c-  F =U 5), e%K -U B[7 ]c.)F(SUa :_ Ug)_/HT#U 8 -AYMU>e QW QO KB)Truy cp th mc c kim sotDKhng th ti m-un mde_cfa_evaluation - Chn on CFA khng sn c*Xc minh ci t MdeDiag v ng k m-unSKhng tm thy pht hin no v CFA (Truy cp th mc c kim sot) trong nht k8Khng yu cu hnh ng  CFA ang hot ng bnh thng; phn tch %1 tp ng ng  xc nh trng thi tin cy`Xem li CfaTrustChecks.txt trong kt qu chn on  bit kt qu phn tch  tin cy chi titM%1 khng c CFA tin tng v hnh nh quy trnh khng c xc nh l tt.^Thm vo danh sch ng dng c php hoc thm loi tr AV cho tp ny nu bn tin tng tp.U%1 khng c CFA tin tng v cng ty m ca n khng c bit n l ng tin cy.;%1 khng c CFA tin cy v cha m ca n l mt tp lnh.H%1 khng c CFA tin tng v n  ti mt tp khng ng tin cy: %2.V%1 khng c CFA tin cy v n c a vo bi mt quy trnh khng ng tin cy: %2.3Thm loi tr AV cho tp ny nu bn tin tng tp.JThm loi tr AV cho quy trnh ny nu bn tin tng (Loi tr Quy trnh).PAQuy trinh: %1 S kin CFA: - Hnh ng: %1, L do: %2S kin Taint:" - TaintType: %1, TaintReason: %2 Hng dn: %1(%1 ln xut hin)PAb'%2' GUID %1 ASR (ngun: %3) c khong trng/tab  u hoc cui c th ngn quy tc c p dng.lHy xa khong trng  u v cui GUID ca Quy tc ASR trong cu hnh Chnh sch Nhm hoc ng k ca bn.'%2' GUID %1 ASR (ngun: %3) cha du ngoc nhn. GUID phi c ch nh khng c du ngoc nhn (v d: 56a863a9-875e-4185-98a7-b882c64b5ce5).eHy xa du ngoc nhn khi GUID ca Quy tc ASR trong cu hnh Chnh sch Nhm hoc ng k ca bn.\Loi tr ASR '%1' (ngun: %2) c khong trng/tab  u hoc cui c th ngn loi tr khp.oLoi b du cch  u v cui khi ng dn loi tr ASR trong cu hnh Chnh sch Nhm hoc ng k ca bn.'%2' GUID %1 ASR (ngun: %3) khng phi l GUID hp l. nh dng d kin: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx (v d: 56a863a9-875e-4185-98a7-b882c64b5ce5).Sa GUID quy tc ASR trong cu hnh ng k hoc chnh sch nhm ca bn  s dng nh dng GUID hp l m khng c k t b sung.Loi tr ASR '%1' (ngun: %2) cha mt phn on th mc cha ('..'). Sau khi gii quyt '..', ng dn b loi tr thc t c th rng hn nhiu so vi mc nhp theo ngh)a en, m thm m rng phm vi loi tr vt ra ngoi phm vi d nh.Thay th mc loi tr ASR bng ng dn tuyt i  c gii quyt y  khng cha phn on '.'. Cc phin bn gn y ca Microsoft Defender t chi cc mc nhp loi tr khng chun ti thi im ti cu hnh.?Thng tin chuyn su v chn on ca Microsoft Defender l g?Thng tin chuyn su v chn on ca Defender l cng c chn on t tr gip, thu thp v phn tch d liu chn on, ng thi cung cp bo co gip khc phc s c hiu sut my o Windows trong Azure. Ti liu Windows v Thng tin chuyn su v chn on ca Defender l %1.+Ti nn bt u xem xt bo co ny t u?Bt u vi tab Tng quan. Xem li cc  xut v lin kt  tm ra kt qu. Tm hiu v cch chng c th nh hng n hiu sut, cing nh cc phng php ti u ha cu hnh  t hiu nng cao nht. Tm hiu thm v cch xem xt bo co %1.IThng tin chuyn su v chn on ca Defender thu thp loi d liu no?9Thng tin chuyn su v chn on ca Defender thu thp thng tin v my o Windows, cu hnh )a hoc vng lu tr, b m hiu sut, cc thnh phn s dng ti nguyn cao, nht k v nhiu du vt khc. Thng tin chi tit v loi thng tin c thu thp bi Thng tin chuyn su v chn on ca Defender l %1.PAPPPP\P xy ra li khi chy m-un LUA. T xy ra li khi ti m-un tp LUA. X xy ra li c php trong m-un LUA. < xy ra li b nh LUA. D xy ra li chung ca LUA. TLi nghim trng trong LUA  xy ra. pVic thc thi LUA  b gin on do tn hiu dng. Khng th t cu hnh ng nh chp nhanh ng cho quy trnh. 4VS_VERSION_INFOee?vStringFileInfoR042A04B0LCompanyNameMicrosoft Corporation7FileDescriptionCng c chn on ca Microsoft Defender cho im cuiBInternalNamedefenderdiag.dll/LegalCopyright Microsoft Corporation. Ba o lu mo#i quyn.ROriginalFilenamedefenderdiag.dll.muij%ProductNameMicrosoft Windows Operating System8FileVersion4.18.26080.4 (ccacee407da609d5c2c557d13db39624e32a0227)> ProductVersion4.18.26080.4DVarFileInfo$Translation*PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD(0( *H '0'10  `He0\ +7N0L0 +70 010  `He `$-NcMUx*k*j1a 0a0I3$]q $0  *H  0S1 0 UUS10U Microsoft Corporation1$0"UWindows Production PCA 20230 260430183934Z 270429183934Z0p1 0 UUS10U Washington10URedmond10U Microsoft Corporation10UMicrosoft Windows00  *H 04bIp%x3 m˝~83`;P#tίeC #3& j1zQ ,-KM_ɨ$8 /?vE^WxqenQvϗ3I~dBoK>w/LF "U HP LR.k'mAѶtի !N _GaE3X2r0{:sV1!iaF4j8..wk!G' Xn̍d%&_'94ˑk[;?9ēx+vE->LTC_ n#o]yOgVgHG+?atʮ,1^r-15t00U0U%0 +7 +0U+NN"! 0EU>0<:0810U Microsoft Corporation10U 500446+5079150U#0 ?Z =!U1S"0ZUS0Q0OMKIhttp://www.microsoft.com/pkiops/crl/Windows%20Production%20PCA%202023.crl0g+[0Y0W+0Khttp://www.microsoft.com/pkiops/certs/Windows%20Production%20PCA%202023.crt0 U00  *H  4Z  1 ˫5FV5;DŐ-%ۚi Mr'4Ɣ!I皸a08.wq ̔`Щ!əO{yeNuj҂XfC ˼S. TQGR|d5$kOJL3$|!&O̅X=H\\ {PΞe;ϳb'iN۲c -fx9b+V#)!˜y^\);W툊kLf3S71 rP`FVsa /C)Ҩ:/Њ$nEh1womGP6h~!R&ar!4 Bswr_ew|8bPOB_L;p5zΙ/2)ta#Z\ԝ l(CR|3!^ B$V H, FD?003V K!0  *H  01 0 UUS10U Washington10URedmond10U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 230613183415Z 350613184415Z0S1 0 UUS10U Microsoft Corporation1$0"UWindows Production PCA 20230"0  *H 0 . ]nqKHb!NF-iY3'xv} /gW@SpגrKҳ>e)Vƃo[y2i]U`˰ʹgxLm%5uG<>#ҥ_x Bf.ޕFo)ݹ<-}έ=p2蝁yQUAoCĵZU~f*>PI!#x(LiinjkIsWL3uoĿX-*e+H$ y\ n%8!_>Զ RH0ƥ>f~4Qbo=5?QI^}PuOlzp0H}qRQ#O3 J/xw_ W;Q5x?Epd"Hi'ư http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0  *H  0Bh߄SIaF( Ӟ_]k*7;Ҹ Yɯ=lQ<0kkP :7!m%|dD vZX^hP_7G, K@mT=O@:-HG'~ڄ:)R'i3hSy_"t:{ݛax1&slk)g8bz<7){&&a: ఽϩ]WNSD<#&=F`hBNelE a(5b ^`/ uhG\zTUMAPvpo&=EOxO&R5rU2$ѨYm܂˵kf.Yѐk&C>m?lVBp)R`ou~q~;1hy>6?TvPFä*yPo .w]Ԧ~CtXX YR" >S-Oܚ'5aI3ɸsEͶLū)YV<_)TE~bTW*ˁF}LdNK Pab{7)5f 5\<]h{HZt 5Gd&f!Ṉרk \zfĿڡգAؿ^.8|KKNYup_~%߁VU(ReUeR BdC]%Cb O`nOy n;Rh[ ^yZES-B"8hCFxةZ=ِ1" N_WgMT1=t&`OݥDb^=5 ]yn nj':0q0Y3kI0  *H  01 0 UUS10U Washington10URedmond10U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 210930182225Z 300930183225Z0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100"0  *H 0 Lr! y$yՂҩlNu5WlJ⽹>`3\OfSqZ~JZ6gF# w2`}jRDFkvPDq\Q17 8n&S|9azĪri65&dژ;{3[~Rb%j]SVMݼ㑏9,Qpi 6-p15(㴇$ɏ~TUmh;Fz)7EFn20\O,b͹⍈䖬Jq[g`= s}AFu_4 }~ٞE߶r/}_۪~66L+nQsM7t4G|?Lۯ^s=CN39LBh.QFѽjZasg^(v3rק  co 6d[!]_0tعP a65Gk\RQ]%PzlrRą<7?xE^ڏriƮ{>j.00 +70# +7*RdĚhttp://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0  *H  U}*,g1$[rKo\>NGdx=139q6?dl|u9m1lѡ"fg:SMݘx6.Vi {jo)n?Hum m#TxSu$Wݟ=heV(U'$@]='@8)üTB  jBRu6as.,k{n?, x鑲[It 쑀=J>f;O2ٖtLrou04zP X@1Q{p( 6ںL 4$5g+ 挙"'B=%tt[jў>~13}{8pDѐȫ::bpcSMmqjU3XpfP080Ѥ01 0 UUS10U Washington10URedmond10U Microsoft Corporation1%0#U Microsoft America Operations1'0%U nShield TSS ESN:3303-05E0-D9471%0#UMicrosoft Time-Stamp Service# 0+ lHf|ru f|hzm0~0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100  *H  C%0"20260903132245Z20260904132245Z0w0= +Y 1/0-0 C%0 (00 ED06 +Y 1(0&0  +Y  0 00  *H  {O@:9Ѿҭw`Y {F#r KOq%d4:ɥ5:a^N.% WGxJde ^mʸQYZN3IsV>ÃuBevEH$MaP=BQIAR|[C~>&IN.5mza@|+y>XY4? s1JOtʴ?y[a~e·J@ x1 0 00|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103!35!!0  `HeJ0 *H  1  *H  0/ *H  1" :n k~]&1D_1Ea(80 *H  /1000 !Urr/duEjl =D00~0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103!35!!0" ('5^+m_^huWrOj450  *H  >HyJO2rڂ nv ~wfٹdY%޵Mz%)rWXth RG55/,)UӴ3;Gz-5ηYl(/3`P밦OGE\;=?K8aI<-{;UTn]p1*yA!dG;C}:)u6x^H zPL :4P\1ΣLˆ1*\!$HuqKIԩvϹ^|Y&euvdY?l05c@ (\?М%`|t6B K$xp͑߹P t=&$,C <:7/p 7޿}gwQ-vbU;iY;ܙ=ΐ@EǼuz}