I ran into this issue also, turns out Windows Defender was not installed on the server due to another anti-Malware client being installed. I uninstalled the "company required" anti-malware from the server, installed Windows Defender and the endpoint protection point installed on the primary site server without issue.