you are trying to set up and configure microsoft defender advanced threat protection on your network. one of the client machines is not reporting properly. you need to verify that the diagnostic data service is enabled. which command can you run to check this?