How do I manage Microsoft Defender Antivirus security policies? 相關
廣告PC-cillin 2024完整防詐攻略：保護資料/偵測威脅/防範侵入，識破各種詐騙手法，全面防護更安心。 不只防毒，更防詐騙！即時封鎖網路未知威脅，手機/電腦安心網購安心PAY，個資密碼不外洩。
搜尋結果
- We recommend using Microsoft Intune to manage Microsoft Defender Antivirus settings for your organization. However, you can use Group Policy to configure and manage some settings for Microsoft Defender Antivirus.
learn.microsoft.com/en-us/defender-endpoint/use-group-policy-microsoft-defender-antivirus
其他人也問了
How do I manage Microsoft Defender Antivirus security policies?
Where can I find Microsoft Defender for endpoint antivirus settings?
How to enable Microsoft Defender for endpoint to enforce security policies?
What settings are available in the Microsoft Defender Antivirus profile?
4 天前 · As a security administrator, you can configure different Microsoft Defender Antivirus security policy settings in the Microsoft Defender portal. Important. Microsoft recommends that you use roles with the fewest permissions. This helps improve security for your organization.
- Manage endpoint security policies in Microsoft Defender for Endpoint
Antivirus - Antivirus policies help security admins ...
- Manage antivirus settings with endpoint security policies in Microsoft Intune
Intune Endpoint security Antivirus policies can help ...
- Configure Microsoft Defender Antivirus with Group Policy - Microsoft Defender for Endpoint | Microsoft Learn
Learn how to use a Group Policy to configure and manage ...
- Manage endpoint security policies in Microsoft Defender for Endpoint
2024年6月25日 · Antivirus - Antivirus policies help security admins focus on managing the discrete group of antivirus settings for managed devices. Disk encryption - Endpoint security disk encryption profiles focus on only the settings that are relevant for a devices built-in encryption method, like FileVault or BitLocker.
- Overview
- Prerequisites for antivirus policy
- Antivirus profiles
- Policy merge for settings
- Antivirus policy reports
- Next steps
Intune Endpoint security Antivirus policies can help security admins focus on managing the discrete group of antivirus settings for managed devices.
Antivirus policy includes several profiles. Each profile contains only the settings that are relevant for Microsoft Defender for Endpoint antivirus for macOS and Windows devices, or for the user experience in the Windows Security app on Windows devices.
You'll find the antivirus policies under Manage in the Endpoint security node of the Microsoft Intune admin center.
Antivirus policies include the same settings as found endpoint protection or device restriction templates for device configuration policy. However, those policy types include additional categories of settings that are unrelated to Antivirus. The additional settings can complicate the task of configuring Antivirus workload. Additionally, the settings found in the Antivirus policy for macOS aren't available through the other policy types. The macOS Antivirus profile replaces the need to configure the settings by using .plist files.
Applies to:
•Linux
Support for Microsoft Intune (MDM) enrolled devices:
•macOS
•Any supported version of macOS
•For Intune to manage antivirus settings on a device, Microsoft Defender for Endpoint must be installed on that device. See. Microsoft Defender for Endpoint for macOS (In the Microsoft Defender for Endpoint documentation)
•Windows 10, Windows 11, and Windows Server
•No additional prerequisites are required.
Devices managed by Microsoft Intune
The following profiles are supported for devices you manage with Intune: macOS: •Platform: macOS •Profile: Antivirus - Manage Antivirus policy settings for macOS. When you use Microsoft Defender for Endpoint for Mac, you can configure and deploy Antivirus settings to your managed macOS devices through Intune instead of configuring those settings by use of .plist files. Windows: •Platform: Windows 10, Windows 11, and Windows Server Profiles for this platform can be used with devices enrolled with Intune, and devices managed through Security Management for Microsoft Defender for Endpoint. •Profile: Microsoft Defender Antivirus - Manage Antivirus policy settings for Windows devices. Defender Antivirus is the next-generation protection component of Microsoft Defender for Endpoint. Next-generation protection brings together technologies like machine learning and cloud infrastructure to protect devices in your enterprise organization. The Microsoft Defender Antivirus profile is a separate instance of the antivirus settings that are found in the Device Restriction profile for Device Configuration policy. Unlike the antivirus settings in a Device Restriction profile, you can use these settings with devices that are co-managed. To use these settings, the co-management workload slider for Endpoint Protection must be set to Intune. •Profile: Microsoft Defender Antivirus exclusions - Manage policy settings for only Antivirus exclusion. With this policy, you can manage settings for the following Microsoft Defender Antivirus configuration service providers (CSPs) that define Antivirus exclusions: •Defender/ExcludedPaths •Defender/ExcludedExtensions •Defender/ExcludedProcesses •Profile: Windows Security experience - Manage the Windows Security app settings that end users can view in the Microsoft Defender Security center and the notifications they receive. The Windows security app is used by a number of Windows security features to provide notifications about the health and security of the machine. Security app notifications include firewalls, antivirus products, Windows Defender SmartScreen, and others. •Profile: Defender Update controls - Manage update settings for Microsoft Defender, including the following settings that are taken directly from the Defender CSP: •Engine Updates Channel •Platform Updates Channel •Security Intelligence Updates Channel
Devices managed by Configuration Manager
Antivirus Manage Antivirus settings for Configuration Manager devices, when you use tenant attach. Policy path: •Endpoint security > Antivirus > Windows 10, Windows 11, and Windows Server (ConfigMgr) Profiles: •Microsoft Defender Antivirus (preview) •Windows Security experience (preview) Required version of Configuration Manager: •Configuration Manager current branch version 2006 or later Supported Configuration Manager device platforms: •Windows 8.1 (x86, x64), starting in Configuration Manager version 2010 •Windows 10 and later (x86, x64, ARM64) •Windows 11 and later (x86, x64, ARM64) •Windows Server 2012 R2 (x64), starting in Configuration Manager version 2010 •Windows Server 2016 and later (x64) Antivirus Manage Antivirus settings for Configuration Manager devices, when you use tenant attach. Policy path: •Endpoint security > Antivirus > Windows 10, Windows 11, and Windows Server (ConfigMgr) Profiles: •Microsoft Defender Antivirus (preview) •Windows Security experience (preview) Required version of Configuration Manager: •Configuration Manager current branch version 2006 or later Supported Configuration Manager device platforms: •Windows 8.1 (x86, x64), starting in Configuration Manager version 2010 •Windows 10 and later (x86, x64, ARM64) •Windows 11 and later (x86, x64, ARM64) •Windows Server 2012 R2 (x64), starting in Configuration Manager version 2010 •Windows Server 2016 and later (x64) Important On October 22, 2022, Microsoft Intune ended support for devices running Windows 8.1. Technical assistance and automatic updates on these devices aren't available. If you currently use Windows 8.1, then we recommend moving to Windows 10/11 devices. Microsoft Intune has built-in security and device features that manage Windows 10/11 client devices.
Some Antivirus policy settings support policy merge. Policy merge helps avoid conflicts when multiple policies apply to the same devices and configure the same setting. Intune evaluates the settings that policy merge supports, for each user or device as taken from all applicable policies. Those settings are then merged into a single superset of policy.
For example, you create three separate antivirus policies that define different antivirus file path exclusions. Eventually, all three policies are assigned to the same user. Because the Microsoft Defender file path exclusion CSP supports policy merge, Intune evaluates and combines the file exclusions from all applicable policies for the user. The exclusions are added to a superset and the single list of exclusions is delivered to the users’ device.
When policy merge isn’t supported for a setting, a conflict can occur. Conflicts can result in the user or device not receiving any policy for the setting. For example, policy merge doesn't support the CSP for preventing installation of matching device IDs (PreventInstallationOfMatchingDeviceIDs). Configurations for this CSP don’t merge, and are processed separately.
When processed separately, policy conflicts are resolved as follows:
1.The most secure policy applies.
2.If two policies are equally secure, the last modified policy applies.
Antivirus policy reports display status details about your endpoint security Antivirus policies and device status. These reports are available in the Endpoint security node of the Microsoft Intune admin center.
To view the reports, in the Microsoft Intune admin center, go to Endpoint security and select Antivirus. Selecting Antivirus opens the Summary page. Additional report and status views are available as additional pages.
In addition to reports detailed in the following sections, additional reports for Microsoft Defender Antivirus are found in the Reports node of the Microsoft Intune admin center, as documented in the Intune Reports article:
•Antivirus agent status report (Organizational)
Configure Endpoint security policies
View details for the Windows settings in the deprecated profiles for the Windows 10 and later platform:
•Antivirus policy settings
•Antivirus exclusions
2024年4月24日 · Learn how to use a Group Policy to configure and manage Microsoft Defender Antivirus on your endpoints in Microsoft Defender for Endpoint.
2024年4月24日 · You can manage and configure Microsoft Defender Antivirus with the following tools: Microsoft Defender for Endpoint Security Configuration Management. Microsoft Intune. Microsoft Configuration Manager. Group Policy. PowerShell cmdlets. Windows Management Instrumentation (WMI)
This article details the settings you can find in Microsoft Defender Antivirus and Microsoft Defender Antivirus Exclusions profiles created before April 5, 2022, for the Windows 10 and later platform for endpoint security Antivirus policy.
2023年2月3日 · Intune has an integration with Microsoft Defender for Endpoint which allows fundamental security policy enforcement on non-managed clients. Even though this is limited to Antivirus, Firewall and EDR policies; it fills an important gap on certain scenarios.
How do I manage Microsoft Defender Antivirus security policies? 相關
廣告Protect Your Most Valuable Data From Cyber Attacks, Malware And Identity Theft. Our Detailed Reviews And Reader Recommendations Will Help You Find The Best Software!
Create your own spreadsheet templates with ease and save them on your computer. Download spreadsheets shared by others and customize them online
