Ensure 'Allow scanning of all downloaded files and attachments' is set to 'Allowed'

So wird geprüft

Prüfmethode: Windows-Registrierung

$bad = @(); $v = (Get-ItemProperty -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\PolicyManager' -Name 'AllowIOAVProtection' -ErrorAction SilentlyContinue).'AllowIOAVProtection'; if (-not ($null -ne $v -and @(1) -contains [int64]$v)) { $bad += 'AllowIOAVProtection=' + $v }; if ($bad.Count -eq 0) { 'compliant' } else { 'non-compliant: ' + ($bad -join ', ') }

Erwartete Ausgabe

compliant

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Allowed. Defender\Allow scanning of all downloaded files and attachments To establish the recommended configuration via Endpoint Security Blade: 1. Navigate to Endpoint Security 2. Click Antivirus 3. Click Create Profile 4. Select Windows for the Platform and Microsoft Defender Antivirus for Profile 5. Name the profile 6. Configure Allow scanning of all downloaded files and attachments to Allowed

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

tmaegis scan --target intune-defender