Windows Error Reporting generates Event 1001

Technical Articles ID: KB89984
Last Modified: 8/12/2021

Environment

McAfee Endpoint Security (ENS) Threat Prevention 10.x
McAfee VirusScan Enterprise (VSE) 8.8
Microsoft Windows 10

Problem

Windows Error Reporting generates information level events for Event ID 1001 after you install ENS or VSE.

Cause

The Windows operating system self-disables Windows Defender when it detects the presence of an antimalware product. As a result, Windows telemetry generates metrics for Event ID 1001 similar to:

Fault bucket, type 0
Event Name: MpTelemetry
Response: Not available
Cab Id: 0

Problem signature:
P1: unspecified
P2: HardeningTelemetry
P3: HardeningTelemetryDisableAS

Workaround

To avoid Windows Error Reporting generating Event ID 1001, disable the Windows Defender features Cloud-based Protection and Automatic sample submission before you install ENS or VSE.

For instructions about how to use Group Policy to enable and disable these features, see the Microsoft article Turn on or off cloud-delivered protection.

Affected Products

Endpoint Security Threat Prevention 10.7.x
Endpoint Security Threat Prevention 10.6.x
VirusScan Enterprise 8.8 (EOL)

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro
Chinese Simplified

Knowledge Center

Windows Error Reporting generates Event 1001

Environment

Problem

Cause

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

Windows Error Reporting generates Event 1001

Environment

Problem

Cause

Workaround

Affected Products

Languages:

Choose your region

Title

Title