Knowledge Center

Windows Error Reporting generates Event 1001 after installing Endpoint Security/VirusScan Enterprise on Windows 10
Technical Articles ID:   KB89984
Last Modified:  6/5/2019


McAfee Endpoint Security (ENS) 10.x
McAfee VirusScan Enterprise (VSE) 8.8
Microsoft Windows 10


Windows Error Reporting generates information level events for Event ID 1001 after installing ENS/VSE.


The Windows operating system self-disables Windows Defender when it detects the presence of an anti-malware product. As a result Windows telemetry generates metrics for Event ID 1001 similar to:

Fault bucket, type 0
Event Name: MpTelemetry
Response: Not available
Cab Id: 0

Problem signature:
P1: unspecified
P2: HardeningTelemetry
P3: HardeningTelemetryDisableAS


To avoid Windows Error Reporting generating Event ID 1001, disable the Windows Defender features Cloud-based Protection and Automatic sample submission before installing ENS/VSE.

For instructions to use Group Policy to enable/disable these features, see https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-antivirus/enable-cloud-protection-windows-defender-antivirus.

Rate this document

Beta Translate with

Select a desired language below to translate this page.


This article is available in the following languages:

English United States
Spanish Spain

Glossary of Technical Terms

 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.