This is how I resolved the error message "Get-MpComputerStatus : The extrinsic Method could not be executed.", in my specific situation. In my situation, I had Windows Defender Antivirus disabled per GPO ("Turn off Windows Defender Antivirus" in Computer Configuration/Administrative Templates/Windows Components/Windows Defender Antivirus). And I wanted to enable Windows Defender in a new GPO, on a specific set of computers.

After I specifically enabled Windows Defender on that set computers (OU), by disabling the above referenced GPO setting, I could still not enable Windows Defender, start the services or get its status.

Mehh... It errored out:

Get-MpComputerStatus : The extrinsic Method could not be executed.
At line:1 char:2
+ (Get-MpComputerStatus).AMServiceEnabled
+  ~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : MetadataError: (MSFT_MpComputerStatus:ROOT\Microsoft\...pComputerStatus) [Get-MpComputer
   Status], CimException
    + FullyQualifiedErrorId : MI RESULT 16,Get-MpComputerStatus

The fix? Enable Windows Defender using MpCmdRun.exe located in C:\Program Files\Windows Defender:

C:\Program Files\Windows Defender\MpCmdRun.exe -wdenable

And reboot.

Donate a cup of coffee
Donate a cup of coffee

Thank you very much! <3 ❤️

4 Comments

  1. Keith

    Thank you Jan! Very helpful as I was also switch over to Defender on servers and didn’t want to remote to each system to manually click “Turn on” to start the Defender service.

  2. David White

    Thank you! Been looking for a command to start Defender after migrating from McAfee on dozens of servers.

Leave a Reply

Your email address will not be published. Required fields are marked *