Windows Error Reporting generates Event 1001

Technical Articles ID: KB89984
Last Modified: 2023-02-22 22:14:07 Etc/GMT

Environment

Endpoint Security (ENS) Threat Prevention 10.x
Microsoft Windows 10

Problem

Windows Error Reporting generates information level events for Event ID 1001 after you install ENS.

Cause

The Windows operating system self-disables Windows Defender when it detects the presence of an antimalware product. As a result, Windows telemetry generates metrics for Event ID 1001 similar to:

Fault bucket, type 0
Event Name: MpTelemetry
Response: Not available
Cab Id: 0

Problem signature:
P1: unspecified
P2: HardeningTelemetry
P3: HardeningTelemetryDisableAS

Workaround

To avoid Windows Error Reporting generating Event ID 1001, disable the Windows Defender features Cloud-based Protection and Automatic sample submission before you install ENS.

For instructions about how to use Group Policy to enable and disable these features, see the Microsoft article Turn on or off cloud-delivered protection.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Windows Error Reporting generates Event 1001

Environment

Problem

Cause

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

Windows Error Reporting generates Event 1001

Environment

Problem

Cause

Workaround

Affected Products

Languages:

Choose your region

Title

Title