diff --git a/windows/keep-secure/other-troubleshooting.md b/windows/keep-secure/other-troubleshooting.md index dc659813ff..2d51679efe 100644 --- a/windows/keep-secure/other-troubleshooting.md +++ b/windows/keep-secure/other-troubleshooting.md @@ -25,3 +25,19 @@ If you have completed the endpoint onboarding process and don't see endpoints in ### Ensure that the endpoint is onboarded successfully If the endpoints aren't reporting correctly, you might need to check that the Windows Defender Advanced Threat Protection service was successfully onboarded on the endpoint. + +**Check the onboarding state in Registry**: + +1. Click **Start**. + +2. Type **Run**. + +3. From the **Run** dialog box, type **regedit** and press **Enter**. + +4. In the **Registry Editor** navigate to the Status key under **HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Advanced Threat Protection**. + +5. Check that the **OnboardingState** value is set to **1**. + + ![Image of OnboardingState status in Registry Editor](images/onboardingstate.png) + + If the **OnboardingState** value is not set to **1**, follow the instructions on **Identifying and addressing onboarding issues**.