From 09caeb11b27bb13f029142cf49e69926ad6dc47b Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 13 Dec 2018 12:48:04 -0800 Subject: [PATCH] edits from Jody --- .../control-usb-devices-using-intune.md | 13 +++---------- 1 file changed, 3 insertions(+), 10 deletions(-) diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md index aec4fcb852..8226378386 100644 --- a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md +++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md @@ -117,17 +117,10 @@ Protecting authorized removable storage with Windows Defender Antivirus requires - If scheduled scans are used, then you need to disable the DisableRemovableDriveScanning (enabled by default) to scan the removable device during a full scan. Removable devices are scanned during a quick or custom scan regardless of the DisableRemovableDriveScanning setting. > [!NOTE] -> We recommend using the real-time protection for scanning (need to build this out.) +> We recommend using the real-time protection for scanning. -(I haven’t checked if there is an Intune setting or if we need to use the Defender CSP. – Justin can you look into this?). - - - -Protecting allowed removable storage with Windows Defender Antivirus requires . -If real-time protection is enabled, files are scanned before they are accessed and executed. -The scanning scope includes all files, including those on mounted removable devices such as USB drives. -You can optionally of a USB drive after it is mounted. -However, we recommend enabling real-time protection for improved scanning performance, especially for large storage devices. + ### Block untrusted and unsigned processes on USB peripherals