Cortex XDR Agent Error: "Failure to register to Windows Security Center - agent works alongside Defender" on Windows 11 Workstation

[P.Pahanpriya]

Hi Community,

I am encountering a status warning in the Cortex XDR Console for several endpoints and would appreciate your guidance.

Status/Error Message:

"Windows Security Center Integration status – Windows: Failure to register to Windows Security Center – agent works alongside Defender"

Environment Details

• Operating System: Windows 11 Pro (64-bit)

• Cortex XDR Agent Version: [Agent version: 9.3.0]

• Desired Protection Configuration: Cortex XDR should operate as the primary real-time protection solution, with Microsoft Defender Antivirus running in Passive Mode.

Current Configuration and Issue

The Windows Security Center Integration setting is explicitly enabled (Default) in the Cortex XDR agent policy. However, despite the agent being successfully installed and the policy being applied, Cortex XDR fails to register with Windows Security Center.

As a result, Microsoft Defender Antivirus does not automatically transition to Passive Mode as expected. Additionally, the affected endpoints display a Partially Protected operational status in the Cortex XDR Console.

Any suggestions or guidance would be greatly appreciated.

Thank you in advance for your assistance!

[kiwi · Accepted solution]

Hi @P.Pahanpriya ,

I've seen this happen in third-party conflicts - Other security software, such as Data Loss Prevention (DLP) or third-party AV agents, may be interfering with the Cortex process cywscsvc.exe (the Windows Security Center service for Cortex), preventing it from modifying required registry keys or communicating with WSC.