mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-17 19:33:37 +00:00
Update manage-atp-post-migration-other-tools.md
This commit is contained in:
@ -1,6 +1,6 @@
|
||||
---
|
||||
title: Manage Microsoft Defender ATP using PowerShell, WMI, and MPCmdRun.exe
|
||||
description: Learn how to manage Microsoft Defender ATP with PowerShell, WMI, and MPCmdRun.exe
|
||||
title: Manage Microsoft Defender for Endpoint using PowerShell, WMI, and MPCmdRun.exe
|
||||
description: Learn how to manage Microsoft Defender for Endpoint with PowerShell, WMI, and MPCmdRun.exe
|
||||
keywords: post-migration, manage, operations, maintenance, utilization, PowerShell, WMI, MPCmdRun.exe, windows defender advanced threat protection, atp, edr
|
||||
search.product: eADQiWindows 10XVcnh
|
||||
search.appverid: met150
|
||||
@ -15,7 +15,7 @@ manager: dansimp
|
||||
audience: ITPro
|
||||
ms.collection: M365-security-compliance
|
||||
ms.topic: article
|
||||
ms.date: 09/04/2020
|
||||
ms.date: 09/22/2020
|
||||
ms.reviewer: chventou
|
||||
---
|
||||
|
||||
@ -25,20 +25,20 @@ ms.reviewer: chventou
|
||||
|
||||
|
||||
**Applies to:**
|
||||
- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559)
|
||||
- [Microsoft Defender ATP](https://go.microsoft.com/fwlink/p/?linkid=2069559)
|
||||
|
||||
> [!NOTE]
|
||||
> We recommend using [Microsoft Endpoint Manager](https://docs.microsoft.com/mem) to manage your organization's threat protection features for devices (also referred to as endpoints). Endpoint Manager includes [Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) and [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/understand/introduction).
|
||||
> - [Learn more about Endpoint Manager](https://docs.microsoft.com/mem/endpoint-manager-overview)
|
||||
> - [Co-manage Microsoft Defender ATP on Windows 10 devices with Configuration Manager and Intune](manage-atp-post-migration-intune.md)
|
||||
> - [Manage Microsoft Defender ATP with Intune](manage-atp-post-migration-intune.md)
|
||||
> - [Co-manage Microsoft Defender for Endpoint on Windows 10 devices with Configuration Manager and Intune](manage-atp-post-migration-intune.md)
|
||||
> - [Manage Microsoft Defender for Endpoint with Intune](manage-atp-post-migration-intune.md)
|
||||
|
||||
You can manage some Microsoft Defender Antivirus settings on devices with [PowerShell](#configure-microsoft-defender-atp-with-powershell), [Windows Management Instrumentation](#configure-microsoft-defender-atp-with-windows-management-instrumentation-wmi) (WMI), and the [Microsoft Malware Protection Command Line Utility](#configure-microsoft-defender-atp-with-microsoft-malware-protection-command-line-utility-mpcmdrunexe) (MPCmdRun.exe). For example, you can manage some Microsoft Defender Antivirus settings. And, in some cases, you can customize your attack surface reduction rules and exploit protection settings.
|
||||
|
||||
> [!IMPORTANT]
|
||||
> Threat protection features that you configure by using PowerShell, WMI, or MCPmdRun.exe can be overwritten by configuration settings that are deployed with Intune or Configuration Manager.
|
||||
|
||||
## Configure Microsoft Defender ATP with PowerShell
|
||||
## Configure Microsoft Defender for Endpoint with PowerShell
|
||||
|
||||
You can use PowerShell to manage Microsoft Defender Antivirus, exploit protection, and your attack surface reduction rules.
|
||||
|
||||
@ -52,7 +52,7 @@ You can use PowerShell to manage Microsoft Defender Antivirus, exploit protectio
|
||||
|**Configure Microsoft Defender Firewall** to block unauthorized network traffic flowing into or out of your organization's devices |[Microsoft Defender Firewall with Advanced Security Administration using Windows PowerShell](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security-administration-with-windows-powershell) |
|
||||
|**Configure encryption and BitLocker** to protect information on your organization's devices running Windows |[BitLocker PowerShell reference guide](https://docs.microsoft.com/powershell/module/bitlocker/?view=win10-ps) |
|
||||
|
||||
## Configure Microsoft Defender ATP with Windows Management Instrumentation (WMI)
|
||||
## Configure Microsoft Defender for Endpoint with Windows Management Instrumentation (WMI)
|
||||
|
||||
WMI is a scripting interface that allows you to retrieve, modify, and update settings. To learn more, see [Using WMI](https://docs.microsoft.com/windows/win32/wmisdk/using-wmi).
|
||||
|
||||
@ -62,7 +62,7 @@ WMI is a scripting interface that allows you to retrieve, modify, and update set
|
||||
|**Retrieve, modify, and update settings** for Microsoft Defender Antivirus | [Use WMI to configure and manage Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus)<br/><br/>[Review the list of available WMI classes and example scripts](https://docs.microsoft.com/previous-versions/windows/desktop/defender/windows-defender-wmiv2-apis-portal) <br/><br/>Also see the archived [Windows Defender WMIv2 Provider reference information](https://docs.microsoft.com/previous-versions/windows/desktop/defender/windows-defender-wmiv2-apis-portal?redirectedfrom=MSDN) |
|
||||
|
||||
|
||||
## Configure Microsoft Defender ATP with Microsoft Malware Protection Command-Line Utility (MPCmdRun.exe)
|
||||
## Configure Microsoft Defender for Endpoint with Microsoft Malware Protection Command-Line Utility (MPCmdRun.exe)
|
||||
|
||||
On an individual device, you can run a scan, start diagnostic tracing, check for security intelligence updates, and more using the mpcmdrun.exe command-line tool. You can find the utility in `%ProgramFiles%\Windows Defender\MpCmdRun.exe`. Run it from a command prompt.
|
||||
|
||||
@ -87,4 +87,4 @@ You can also configure whether and what features end users can see in the Micros
|
||||
|
||||
- [Visit the Microsoft Defender Security Center security operations dashboard](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard)
|
||||
|
||||
- [Manage Microsoft Defender ATP with Intune](manage-atp-post-migration-intune.md)
|
||||
- [Manage Microsoft Defender for Endpoint with Intune](manage-atp-post-migration-intune.md)
|
||||
|
Reference in New Issue
Block a user