IsHostGuarded shows False on an HGS node that was in-place upgraded to Windows Server, version 1903 or Windows Server 2019

Applies to: Windows Server, version 1903Windows Server 2019, all versions


Consider the following scenario:

  • In a Windows Server, version 1903 or Windows Server 2019 environment, you have a Host Guardian Service (HGS) node, a guarded host, and a domain controller (DC) installed.

  • You verify that the guarded host is working by running Get-HGSClientConfiguration. This cmdlet should return IsHostGuarded as True.

  • You in-place upgrade the HGS node and the guarded host to Windows Server 2019. To do this, you run Setup.exe from a mounted ISO of Windows Server 2019.

  • You run Get-HGSClientConfiguration again.

In this scenario, the output of the IsHostGuarded is False.


To resolve this issue, run the Initialize-HgsServer cmdlet to rejoin the node to the cluster. For more information, see Upgrade HGS to Windows Server 2019.