SHD / MC Checker

[serviceDegradation] DZ1189321 | Microsoft Defender XDR | Some may users see incorrect service names and descriptions in Services and the Event Viewer upon upgrade to Windows 11



DZ1189321 | Microsoft Defender XDR | Some may users see incorrect service names and descriptions in Services and the Event Viewer upon upgrade to Windows 11

Status serviceDegradation
Classification advisory
User Impact Users may see incorrect service names and descriptions in Services and the Event Viewer after upgrading to Windows 11.
Last Updated 11/23/2025 21:12:56
Start Time 11/23/2025 19:58:02
End Time
Latest Message Title: Some may users see incorrect service names and descriptions in Services and the Event Viewer upon upgrade to Windows 11

User impact: Users may see incorrect service names and descriptions in Services and the Event Viewer after upgrading to Windows 11.

More info: This issue is only impacting users who have upgraded to Windows 11 during or after June of 2025.

User interface impact only:

– Service name for Windows Advanced Threat Protection (Sense) shows as “Sense” in English instead of the localized text.

– Users attempting to view service descriptions under Service may see the following error or descriptions appear in English: “Failed to Read Description. Error Code: 15100”

– Event Viewer logs for Sense may show error text instead of properly formatted localized descriptions.

No functional impact:

– Device telemetry and reporting to Microsoft Defender for Endpoint portal aren’t impacted.

– No portal unavailability, alert delays, or API failures.

Current status: We’ve identified a recent Windows update that is producing incorrect service names and descriptions in Services and the Event Viewer for some users who have upgraded to Windows 11 in or after June of 2025. As we work to confirm an accurate window of impact, we’re developing a code fix to address the offending change and to remediate the impact. We’ll provide an updated timeline for the deployment of our fix and the remediation of impact once our internal validations have completed.

Scope of impact: This issue is impacting a subset of users who have upgraded to Windows 11 in or after June of 2025.

Root cause: A standard Windows update may be producing localization issues including incorrect service names and descriptions in Services and the Event Viewer for users who have upgraded to Windows 11 in or after June of 2025.

Next update by: Monday, November 24, 2025, at 10:30 AM UTC