How-to fix Windows Defender error “Get-MpComputerStatus : The extrinsic Method could not be executed.”

Enabling Windows Defender per GPO failed with an error message “Get-MpComputerStatus : The extrinsic Method could not be executed.“, here is how to resolve this issue.

I had Windows Defender Antivirus disabled per GPO (“Turn off Windows Defender Antivirus” in Computer Configuration/Administrative Templates/Windows Components/Windows Defender Antivirus), and I wanted to enable Windows Defender in a new GPO, on a specific set of computers in an OU (or Organizational Unit).

After I specifically enabled Windows Defender on that set computers (OU), by disabling the above referenced GPO setting, I could still not enable Windows Defender, start the services or get its status.

Mehh… It errored out:

Get-MpComputerStatus : The extrinsic Method could not be executed.
At line:1 char:2
+ (Get-MpComputerStatus).AMServiceEnabled
+  ~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : MetadataError: (MSFT_MpComputerStatus:ROOT\Microsoft\...pComputerStatus) [Get-MpComputer
   Status], CimException
    + FullyQualifiedErrorId : MI RESULT 16,Get-MpComputerStatus

Get-MpComputerStatus : The extrinsic Method could not be executed.

Windows Defender: Turn off routine remediation.

The fix? Enable Windows Defender using MpCmdRun.exe located in C:\Program Files\Windows Defender:

C:\Program Files\Windows Defender\MpCmdRun.exe -wdenable

And reboot your computer or server.