Path to MSSense on Server 2012R2/2016 with MD4WS is different in SENSE Service (and WinDefend)

[PehDeh]

trafficstars

Hi,

i see executables beiing placed in Programdata instead of Programfiles. if so should the mde-urls-comercial.xlsx be updated with new paths? E.g: c:\programdata\microsoft\windows defender advanced threat protection\platform\10.8049.22439.1084\mssense.exe

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: b25b8545-b7f0-e035-ca6e-26b1530feddb
• Version Independent ID: 93b5152a-2ba2-1239-ded7-42896cacc074
• Content: Set up Microsoft Defender for Endpoint deployment
• Content Source: microsoft-365/security/defender-endpoint/production-deployment.md
• Service: microsoft-365-security
• Sub-service: mde
• GitHub Login: @mjcaparas
• Microsoft Alias: macapara

[yogkumgit]

@mjcaparas Please help us in resolving this issue. Thanks

[PehDeh]

Also if i look at the WinDefend Service this also seems to have been relocated to "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0"

not so cool if you do outbound hostbased firewaling and now have to deal with variable paths. Furthermore the old Directory is not beeing removed.

[PehDeh]

https://support.microsoft.com/en-us/topic/update-for-microsoft-defender-antimalware-platform-kb4052623-92e21611-8cf1-8e0e-56d6-561a07d144cc

Windows Defender Antivirus service (MsMpEng.exe) and Network Realtime Inspection service (NisSrv.exe) : %ProgramFiles%\Windows Defender -> %ProgramData%\Microsoft\Windows Defender\Platform<Version>

Windows Defender Antivirus drivers %Windir%\System32\drivers -> %Windir%\System32\drivers\wd