#Preference manager windows how to#
#Preference manager windows full#

Matches any number of any characters including none (note that when this wildcard is used inside a path it will substitute only one folder) įile, folder, and process exclusions support the following wildcards: You can check if a path is a symbolic link by running file. The paths above must be hard links, not symbolic links, in order to be successfully excluded.

#Preference manager windows full#

The following table shows the exclusion types supported by Defender for Endpoint on Mac.Īll files with the extension, anywhere on the deviceĪ specific file identified by the full pathĪll files under the specified folder (recursively)Ī specific process (specified either by the full path or file name) and all files opened by it Specify content excluded from being scanned by full file path. Specify content excluded from being scanned by type. (Exclusions are specified as an array of items, administrator can specify as many elements as necessary, in any order.)

Exclusions can be specified by full paths, extensions, or file names. Specify entities excluded from being scanned. This setting can be used to restrict local users from defining their own exclusions.Īvailable in Microsoft Defender for Endpoint version 100.83.73 or higher. This can be a combination of administrator-defined and user-defined exclusions ( merge), or only administrator-defined exclusions ( admin_only). Allowed values are integers between 1 and 64. This corresponds to the number of threads used to perform the scan and impacts the CPU usage, as well as the duration of the on-demand scan.Ģ (default). Specifies the degree of parallelism for on-demand scans. Specifies whether to scan archives during on-demand antivirus scans.ĭegree of parallelism for on-demand scans Scan archives (on-demand antivirus scans only) Enabling this setting will trigger an antivirus scan on the running processes of the device.Īvailable in Microsoft Defender for Endpoint version 101.41.10 or higher. Specifies whether to start a process scan after new security intelligence updates are downloaded on the device. SectionĪvailable in Defender for Endpoint version 101.73.77 or higher. For more details, please refer to: Create indicators for files. Note that enabling this feature might impact device performance. When this feature is enabled, Defender for Endpoint will compute hashes for files it scans. Security intelligence updates are turned on.Īvailable in Microsoft Defender for Endpoint version 101.10.72 or higher.Įnables or disables file hash computation feature.Automatic threat remediation is turned off.Passive ( passive): Runs the antivirus engine in passive mode.On-demand ( on_demand): Files are scanned only on demand.Real-time ( real_time): Real-time protection (scan files as they are accessed) is enabled.There are three values for setting enforcement level: Specifies the enforcement preference of antivirus engine. See the following sections for a description of the dictionary contents. The antivirusEngine section of the configuration profile is used to manage the preferences of the antivirus component of Microsoft Defender for Endpoint. The top level of the configuration profile includes product-wide preferences and entries for subareas of Microsoft Defender for Endpoint, which are explained in more detail in the next sections. The following sections contain examples of configuration profiles for JAMF and Intune. The layout of the configuration profile depends on the management console that you are using. Values can either be simple (such as a numerical value) or complex, such as a nested list of preferences. plist file that consists of entries identified by a key (which denotes the name of the preference), followed by a value, which depends on the nature of the preference.

#Preference manager windows how to#

This article describes the structure of the configuration profile, includes a recommended profile that you can use to get started, and provides instructions on how to deploy the profile. Changing the preferences that are set through the configuration profile requires escalated privileges and is not available for users without administrative permissions. Preferences that are managed by your security operations team take precedence over preferences that are set locally on the device. In enterprise organizations, Microsoft Defender for Endpoint on macOS can be managed through a configuration profile that is deployed by using one of several management tools. To configure Microsoft Defender for Endpoint on macOS using the command-line interface, see Resources. This article contains instructions for how to set preferences for Microsoft Defender for Endpoint on macOS in enterprise organizations.