Initially windows defender was disabled for some reason in Windows server 2016. I enabled it from gpedit.msc by disabling "Turn off windows defender".
When opening Windows defender, it shows real-time protection "disabled". I went to settings and enabled realtime protection but still defender shows it is disabled. Please see http://i.is.cc/tmZNGl.png
I followed the suggestions in this post, but no luck.
The server had few malware which was removed using Microsoft security scanner and online eset scanner
sfc /scannnow finished without any errors. I'm out of options. Please help.