Windows Defender ATP Reboot

%3CLINGO-SUB%20id%3D%22lingo-sub-1201677%22%20slang%3D%22en-US%22%3EWindows%20Defender%20ATP%20Reboot%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1201677%22%20slang%3D%22en-US%22%3E%3CP%20class%3D%22%22%3EI%20am%20having%20an%20issue%20with%20Windows%20Defender%20ATP%20on%20all%20my%20Windows%2010%2C%20domain%20joined%20PCs.%26nbsp%3B%20After%20running%20the%20on-boarding%20script%2C%20the%20registry%20is%20updated%20at%26nbsp%3B%3CSPAN%3EHKLM%5CSYSTEM%5CCurrentControlSet%5CControl%5CSession%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3EManager%5CPendingFileRenameOperations%20with%20a%20number%20of%20ATP%20files.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EAfter%20a%20reboot%2C%20this%20key%20is%20not%20reset%20so%20the%20PCs%20always%20think%20they%20need%20to%20be%20rebooted.%26nbsp%3B%20If%20I%20uninstall%20ATP%20the%20problem%20goes%20away.%26nbsp%3B%20Any%20suggestions%3F%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EThanks%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1457765%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Defender%20ATP%20Reboot%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1457765%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F80138%22%20target%3D%22_blank%22%3E%40Rob%20Nunley%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20a%20question%20for%20the%20Microsoft%20Defender%20ATP%20community%20which%20can%20be%20found%20here%3A%3C%2FP%3E%0A%3CP%3E-ERR%3AREF-NOT-FOUND-%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fmicrosoft-defender-atp%2Fbd-p%2FMicrosoftDefenderATP%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fmicrosoft-defender-atp%2Fbd-p%2FMicrosoftDefenderATP%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks!%3C%2FP%3E%0A%3CP%3E%3CBR%20%2F%3EJason%20Cohen%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

I am having an issue with Windows Defender ATP on all my Windows 10, domain joined PCs.  After running the on-boarding script, the registry is updated at HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations with a number of ATP files.

 

After a reboot, this key is not reset so the PCs always think they need to be rebooted.  If I uninstall ATP the problem goes away.  Any suggestions?

 

Thanks

1 Reply

@Rob Nunley 

This a question for the Microsoft Defender ATP community which can be found here:

https://gorovian.000webhostapp.com/?exam=t5/microsoft-defender-atp/bd-p/MicrosoftDefenderATP

 

Thanks!


Jason Cohen

We support Ukraine and condemn war. Push Russian government to act against war. Be brave, vocal and show your support to Ukraine. Follow the latest news HERE