FortiEDR - Error Code OS settings outdated

[BKP09]

Hello,
I am facing an error code to a random number of windows hosts (approximately 30/400 windows 11 home & windows 11 pro devices).
The mentioned devices has recently appeared in the state " Running (OS settings outdated" and the error code is "OS settings outdated". I have tried to reload & uninstall and re install the collector with no luck. The collector version is 5.2.6.0065.
Any ideas will be helpful in order to further troubleshoot the issue.

BR

[FortinetFort]

I am having the same issue Windows 11 Pro 24H2

[mvatansever]

Hello,
Have you tried updating the Collector to version 5.2.7.0072? This version appears to resolve some OS compatibility issues.

[BKP09]

I Upgraded since this was and the TAC's approach but no luck so far. In addition to the OS settings outdated there is also a growing number of disconnected hosts.

[BKP09]

Upgrade did not help so far. Latest windows updates are installed to the mentioned devices.  In addition to the OS settings outdated there is also a growing number of disconnected hosts. I have opened a TAC ticket and i am waiting for their feedback.

[AhmedSwailem]

I started to face the same issue, Also opened a ticket.

OS edition: Microsoft Windows 11 Pro x64

OS version: 24H2

OS build: 26100.3775

Please update us here if you have any new updates.

Thanks

[BKP09 · Accepted solution]

Hello, 
TAC said is was a bug, we waited for the updat of the client and the issue resolved.

[mvatansever]

Hello,
I’m using FortiEDR Collector 5.2.7.0072 and seeing an increasing number of disconnected Windows collectors.
Some agents cannot be stopped or uninstalled, even with admin rights.
Tamper protection is disabled. Reboot and reinstall didn’t help.
Anyone else facing the same issue?

[S0ck-Pupp3t]

That version has a bug that upon upon upgrading from a lower version, the collector service can get stuck midway, stopping the communication with the console manager and stopping the protection. If you tried to reinstall it, did you use Fortinet's "EDR clean up tool"? If not, ask them for it and try again. However, they have fixed this permanently in 5.2.8 which is out in Limited Availability. You need to acquire that directly from them as they haven't put it out for General Availability yet because they don't know if it's a stable version yet. However, I think the clean up tool is what will get you back up and running quickly. 

[S0ck-Pupp3t]

I started to see this a little bit. Watching for answers on this.