Ensure 'Allow scanning of all downloaded files and attachments' is set to 'Allowed'

Cara pemeriksaan

Metode audit: Registry Windows

$bad = @(); $v = (Get-ItemProperty -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\PolicyManager' -Name 'AllowIOAVProtection' -ErrorAction SilentlyContinue).'AllowIOAVProtection'; if (-not ($null -ne $v -and @(1) -contains [int64]$v)) { $bad += 'AllowIOAVProtection=' + $v }; if ($bad.Count -eq 0) { 'compliant' } else { 'non-compliant: ' + ($bad -join ', ') }

Output yang diharapkan

compliant

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Allowed. Defender\Allow scanning of all downloaded files and attachments To establish the recommended configuration via Endpoint Security Blade: 1. Navigate to Endpoint Security 2. Click Antivirus 3. Click Create Profile 4. Select Windows for the Platform and Microsoft Defender Antivirus for Profile 5. Name the profile 6. Configure Allow scanning of all downloaded files and attachments to Allowed

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

tmaegis scan --target intune-defender