I try to use group policy to deploy windows defender to my client, but it cant get it install.

here is the log
==========================================================
Event ID:108
Failed to apply changes to software installation settings. Software changes could not be applied. A previous log entry with details should exist. The error was : Fatal error during installation.

Event ID:1085
The Group Policy client-side extension Software Installation failed to execute. Please look for any errors reported earlier by that extension.
==========================================================

I did search google for a result, it seems like i have to do a kerboros authorization. Is that true?

Can anybody shed me some lights