Application Health: unhealthy reasons

An application may be unhealthy for a number of reasons. To help you troubleshoot unhealthy applications, the Application Health > Health column may show one or more of the following unhealthy reasons:

The Application Health > Health column is available on the following pages and reports: Applications page, Applications page in Device Details, and the Installed Applications report.

Preconditions	Health check stage	Possible unhealthy reasons
Application is resilient A third party application that is actively monitored by the Secure Endpoint Agent. This feature is available only when the Application Resilience policy is activated on a Windows device. Depending on the configuration of this policy, the agent may be able to repair the application if it's non-compliant, or reinstall it if it's missing. Installed Applications policy is activated	Installation	All applications Application installed but not found in registry File has unexpected signer File not found File not signed File not trusted by OS Installed version does not match expected version Registry key does not exist Registry key has unexpected value Service does not exist Service file does not exist Service has unexpected signer Service has unexpected startup type Service not signed BitLocker only BitLocker Group Policy conflicts BitLocker user exempt from encryption in MBAM policy Drives not encrypted Drives with non-compliant encryption Health checks failed Invalid MBAM management URL MBAM agent not running Operating system not supported by BitLocker System drive must be NTFS. And non-system drive must be NTFS, FAT, FAT32, or exFAT TPM not activated TPM not enabled TPM version is older than 1.2 Volume size is smaller than expected: 64 MB Intune only Certificate expired SCCM only Admin share not found Application not installed Assigned site not found CCM installer folder not found Domain attribute not configured Management point not configured
	Running state	All applications Process not running Process running and should not be Service failed to restart Service not running BitLocker only MBAM agent not running WMI not functional SCCM only Date and time of last hardware inventory scan could not be retrieved Date and time of last software inventory scan could not be retrieved WMI not functional
	Configuration In the current release, this stage applies to Windows devices only.	Anti-malware definition out of date Anti-malware not active Not fully encrypted
Application is not resilient Installed Applications policy is activated	Installation	File not trusted by OS
	Running state	N/A
	Configuration In the current release, this stage applies to Windows devices only.	Anti-malware definition out of date Anti-malware not active Not fully encrypted