Disable Windows Defender Advanced Thread Protection Service

The configuration of the XProtect Management Server Failover will fail if the Windows Defender Advanced Thread Protection Service is enabled.

1. On Node 1, open the Start menu, and enter services.msc to open Services.

2. Scroll down to Windows Defender Advanced Threat Protection Service.

3. Check the status of the service. If the status field is blank, this means that the service is not running.

4. To prevent the service from starting at system startup, right-click the service and select Properties. On the General tab, change the Startup type to:

   • Disabled if the service is running.

   • Manual is the service is stopped.

   Then, select OK to save your changes.

   You must have the necessary user permissions in Windows to perform this operation.

   

5. Repeat steps 1-4 on Node 2.