mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-23 14:23:38 +00:00
update ps for asr enabling and remove cloud reqs for CFA and ASR
This commit is contained in:
@ -129,7 +129,7 @@ The following requirements must be met before Attack Surface Reduction will work
|
|||||||
|
|
||||||
Windows 10 version | Windows Defender Antivirus
|
Windows 10 version | Windows Defender Antivirus
|
||||||
- | -
|
- | -
|
||||||
Insider Preview build 16232 or later (dated July 1, 2017 or later) | [Windows Defender AV real-time protection](../windows-defender-antivirus/configure-real-time-protection-windows-defender-antivirus.md) and [cloud-delivered protection](../windows-defender-antivirus/enable-cloud-protection-windows-defender-antivirus.md) must be enabled
|
Insider Preview build 16232 or later (dated July 1, 2017 or later) | [Windows Defender AV real-time protection](../windows-defender-antivirus/configure-real-time-protection-windows-defender-antivirus.md) must be enabled
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
@ -62,7 +62,7 @@ The following requirements must be met before Controlled Folder Access will work
|
|||||||
|
|
||||||
Windows 10 version | Windows Defender Antivirus
|
Windows 10 version | Windows Defender Antivirus
|
||||||
-|-
|
-|-
|
||||||
Insider Preview build 16232 or later (dated July 1, 2017 or later) | [Windows Defender AV real-time protection](../windows-defender-antivirus/configure-real-time-protection-windows-defender-antivirus.md) and [cloud-delivered protection](../windows-defender-antivirus/enable-cloud-protection-windows-defender-antivirus.md) must be enabled
|
Insider Preview build 16232 or later (dated July 1, 2017 or later) | [Windows Defender AV real-time protection](../windows-defender-antivirus/configure-real-time-protection-windows-defender-antivirus.md) must be enabled
|
||||||
|
|
||||||
|
|
||||||
## Review Controlled Folder Access events in Windows Event Viewer
|
## Review Controlled Folder Access events in Windows Event Viewer
|
||||||
|
@ -90,13 +90,13 @@ See the [Attack Surface Reduction](attack-surface-reduction-exploit-guard.md) to
|
|||||||
2. Enter the following cmdlet:
|
2. Enter the following cmdlet:
|
||||||
|
|
||||||
```PowerShell
|
```PowerShell
|
||||||
Add-MpPreference -AttackSurfaceReductionRules_Ids <rule ID>
|
Set-MpPreference -AttackSurfaceReductionRules_Ids <rule ID> -AttackSurfaceReductionRules_Actions Enabled
|
||||||
```
|
```
|
||||||
|
|
||||||
You can enable the feature in audit mode using the following cmdlet:
|
You can enable the feature in audit mode using the following cmdlet:
|
||||||
|
|
||||||
```PowerShell
|
```PowerShell
|
||||||
Set-MpPreference -AttackSurfaceReductionRules_Actions AuditMode
|
Add-MpPreference -AttackSurfaceReductionRules_Ids <rule ID> -AttackSurfaceReductionRules_Actions AuditMode
|
||||||
```
|
```
|
||||||
|
|
||||||
Use `Disabled` insead of `AuditMode` or `Enabled` to turn the feature off.
|
Use `Disabled` insead of `AuditMode` or `Enabled` to turn the feature off.
|
||||||
|
Reference in New Issue
Block a user