Question about Intercept X on newly installed endpoints

Question

Can anyone tell me why my newly provisioned endpoints are going into central with the little blue plus sign like Intercept X is not enabled on them? Perhaps I just don't understand the process or we are deploying an old .exe??? I thought that since we deploy with the executable as part of the imaging process they will have intercept x with XDR enabled because that is the licensing we have for endpoints? Thanks!!!!

This thread was automatically locked due to age.

Qoosh · Answer

This could occur if the original device from which the image was, taken did not have all the necessary products initially installed. This results in the "registrationToken" mentioned in the Gold Image KBA being different. Since this token is used on all of the child images, the newly imaged devices may report in inaccurately, even though the correct components are already present.

Question about Intercept X on newly installed endpoints

Top Replies