Fail to Launch Windows Defender to my clients

[bbmak]

I try to use group policy to deploy windows defender to my client, but it cant get it install.

here is the log

==========================================================

Event ID:108

Failed to apply changes to software installation settings. Software changes could not be applied. A previous log entry with details should exist. The error was : Fatal error during installation.

Event ID:1085

The Group Policy client-side extension Software Installation failed to execute. Please look for any errors reported earlier by that extension.

==========================================================

I did search google for a result, it seems like i have to do a kerboros authorization. Is that true?

Can anybody shed me some lights