configure windows defender with microsoft intune

CONFIGURE WINDOWS DEFENDER WITH MICROSOFT INTUNE WINDOWS 10
CONFIGURE WINDOWS DEFENDER WITH MICROSOFT INTUNE PLUS

Monitoring for incoming and outgoing filesĬonfigure this setting to determine which NTFS file and program activity is monitored.īy default, Defender on Windows 10/11 desktop devices uses the Behavior Monitoring functionality.

Yes - On Access Protection is active on devices.

No - Block On Access Protection on devices.

The existing state on the device remains unchanged.

Not Configured ( default) - This policy doesn't alter the state of this setting on a device.

Device users can't change this setting.Ĭonfigure virus protection that's continuously active, as opposed to on demand.

Yes - Enforce use of real-time monitoring.

Not configured ( default) - The setting is restored to the system default.

Require Defender on Windows 10/11 desktop devices to use the real-time Monitoring functionality. These settings are available in the following profiles: Specify a list of files and directory paths to ignore during a scan. Specify a list of file type extensions to ignore during a scan. The process itself isn't excluded from the scan.įile extensions to exclude from scans and real-time protection Specify a list of files opened by processes to ignore during a scan.

Microsoft Defender Antivirus Exclusionsįor each setting in this group, you can expand the setting, select Add, and then specify a value for the exclusion.

The following settings are available in the following profiles: Managed settings override preference settings that are configured by the local administrator.

Yes - Only items defined by management are used in the resulting effective policy.

No - Behavior is the same as Not configured.

If there are conflicts, management settings from Intune policy override local preference settings.

Not configured (default) - Unique items defined in preference settings that are configured by a local administrator merge into the resulting effective policy.

This setting applies to lists such as threats and exclusions. This setting controls if exclusion list settings that are configured by a local administrator merge with managed settings from Intune policy.

The following settings are available in the Microsoft Defender Antivirus profile:ĬSP: Configuration/DisableLocalAdminMerge

You can add up to 50 additional seconds to this timeout. Zero tolerance - Block all unknown executable files.ĭefender cloud extended timeout in secondsĭefender Antivirus automatically blocks suspicious files for 10 seconds while it scans them in the cloud to make sure they're safe.

CONFIGURE WINDOWS DEFENDER WITH MICROSOFT INTUNE PLUS

High plus - Aggressively block unknowns and apply additional protection measures that might affect client performance.

High - Aggressively block unknowns while optimizing client performance, which includes a greater chance of false positives.

Not configured ( default) - Default Defender blocking level.

Device users can't change this setting.Ĭonfigure how aggressive Defender Antivirus is in blocking and scanning suspicious files.

Yes - Cloud-delivered protection is turned on.

Not configured ( default) - The setting is restored to the system default.

Microsoft analyzes that information to learn more about problems affecting you and other customers, to offer improved solutions. Cloud protectionīy default, Defender on Windows 10/11 desktop devices sends information to Microsoft about any problems it finds. The following settings details for Windows profiles apply to those deprecated profiles. When viewing a settings information text, you can use its Learn more link to open that content. That content can provide more information about the use of the setting in its proper context. Instead, the name of each setting, its configuration options, and its explanatory text you see in the Microsoft Intune admin center are taken directly from the settings authoritative content. Although you can no longer create new instances of the older profile, you can continue to edit and use instances of it that you previously created.įor profiles that use the new settings format, Intune no longer maintains a list of each setting by name. With this change you can no longer create new versions of the old profile and they are no longer being developed. Profiles created after that date use a new settings format as found in the Settings Catalog.

CONFIGURE WINDOWS DEFENDER WITH MICROSOFT INTUNE WINDOWS 10

On April 5, 2022, the Windows 10 and later platform was replaced by the Windows 10, Windows 11, and Windows Server platform. This article details the settings you can find in Microsoft Defender Antivirus and Microsoft Defender Antivirus Exclusions profiles created before April 5, 2022, for the Windows 10 and later platform for endpoint security Antivirus policy.

Configure windows defender with microsoft intune