From 9c3eee5471fb97ab045b7596aa1854a2ca9c57a4 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Mon, 30 Sep 2019 08:42:01 +0500 Subject: [PATCH 01/10] Detailed explanation of level As the user suggested, I have applied detailed descriptions of levels. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/4577 --- ...tection-level-windows-defender-antivirus.md | 18 +++++++----------- 1 file changed, 7 insertions(+), 11 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md index 11c42404cd..a69d7ffe3a 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md @@ -37,12 +37,9 @@ You can specify the level of cloud-protection offered by Windows Defender Antivi 4. Select **Properties**, select **Settings: Configure**, and then select **Windows Defender Antivirus**. 5. On the **File Blocking Level** switch, select one of the following: - 1. **High** to provide a strong level of detection - 2. **High +** to apply additional protection measures - 3. **Zero tolerance** to block all unknown executables - - > [!WARNING] - > While unlikely, setting this switch to **High** might cause some legitimate files to be detected. The **High +** setting might impact client performance. We recommend you set this to the default level (**Not configured**). + 1. **High** Applies a strong level of detection. + 2. **High +** Uses the high level and applies additional protection measures(may impact client performance). + 3. **Zero tolerance** Block all unknown executables. 8. Click **OK** to exit the **Windows Defender Antivirus** settings pane, click **OK** to exit the **Device restrictions** pane, and then click **Save** to save the changes to your **Device restrictions** profile. @@ -65,14 +62,13 @@ For more information about Intune device profiles, including how to create and c 1. Double-click the **Select cloud protection level** setting and set it to **Enabled**. Select the level of protection: 1. Setting to **Default Windows Defender Antivirus blocking level** provides strong detection without increasing the risk of detecting legitimate files. - 2. Setting to **High blocking level** applies a strong level of detection. - 3. **High + blocking level** applies additional protection measures. + 2. Setting to **High blocking level** applies a strong level of detection while optimizing client performace (greater chances of false positives). + 3. **High + blocking level** applies additional protection measures(may impact client performance and increase rsik of false positives). 4. **Zero tolerance blocking level** blocks all unknown executables. > [!WARNING] - > While unlikely, setting this switch to **High** might cause some legitimate files to be detected (although you will have the option to unblock or dispute that detection). The **High +** setting might impact client performance. We recommend you set this to the default level (**Not configured**). - -1. Click **OK**. + > While unlikely, setting this switch to **High** and **High +** might cause some legitimate files to be detected (although you will have the option to unblock or dispute that detection). +6. Click **OK**. From caa0e7a1ee76d101af555180bef80a7c482f8c0d Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 1 Oct 2019 13:51:47 +0500 Subject: [PATCH 02/10] Update windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- ...specify-cloud-protection-level-windows-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md index a69d7ffe3a..9b75055ebc 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md @@ -37,7 +37,7 @@ You can specify the level of cloud-protection offered by Windows Defender Antivi 4. Select **Properties**, select **Settings: Configure**, and then select **Windows Defender Antivirus**. 5. On the **File Blocking Level** switch, select one of the following: - 1. **High** Applies a strong level of detection. + 1. **High**: Applies a strong level of detection. 2. **High +** Uses the high level and applies additional protection measures(may impact client performance). 3. **Zero tolerance** Block all unknown executables. From 310d9507c85877eebd8a06ea69a1ce95d750b391 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 1 Oct 2019 13:51:56 +0500 Subject: [PATCH 03/10] Update windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- ...specify-cloud-protection-level-windows-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md index 9b75055ebc..b58fb8bdb6 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md @@ -38,7 +38,7 @@ You can specify the level of cloud-protection offered by Windows Defender Antivi 5. On the **File Blocking Level** switch, select one of the following: 1. **High**: Applies a strong level of detection. - 2. **High +** Uses the high level and applies additional protection measures(may impact client performance). + 2. **High +**: Uses the **High** level and applies additional protection measures (may impact client performance). 3. **Zero tolerance** Block all unknown executables. 8. Click **OK** to exit the **Windows Defender Antivirus** settings pane, click **OK** to exit the **Device restrictions** pane, and then click **Save** to save the changes to your **Device restrictions** profile. From c743d5f95b4b421a2458641a02469618f9ea4355 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 1 Oct 2019 13:52:04 +0500 Subject: [PATCH 04/10] Update windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- ...specify-cloud-protection-level-windows-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md index b58fb8bdb6..4ac8fa7091 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md @@ -39,7 +39,7 @@ You can specify the level of cloud-protection offered by Windows Defender Antivi 1. **High**: Applies a strong level of detection. 2. **High +**: Uses the **High** level and applies additional protection measures (may impact client performance). - 3. **Zero tolerance** Block all unknown executables. + 3. **Zero tolerance**: Block all unknown executables. 8. Click **OK** to exit the **Windows Defender Antivirus** settings pane, click **OK** to exit the **Device restrictions** pane, and then click **Save** to save the changes to your **Device restrictions** profile. From 742f5c05a66acb92935e1425cdc7b0406f48ccc1 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 1 Oct 2019 13:52:12 +0500 Subject: [PATCH 05/10] Update windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- ...specify-cloud-protection-level-windows-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md index 4ac8fa7091..dfcc449384 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md @@ -61,7 +61,7 @@ For more information about Intune device profiles, including how to create and c 5. Expand the tree to **Windows components > Windows Defender Antivirus > MpEngine**. 1. Double-click the **Select cloud protection level** setting and set it to **Enabled**. Select the level of protection: - 1. Setting to **Default Windows Defender Antivirus blocking level** provides strong detection without increasing the risk of detecting legitimate files. + 1. **Default Windows Defender Antivirus blocking level** provides strong detection without increasing the risk of detecting legitimate files. 2. Setting to **High blocking level** applies a strong level of detection while optimizing client performace (greater chances of false positives). 3. **High + blocking level** applies additional protection measures(may impact client performance and increase rsik of false positives). 4. **Zero tolerance blocking level** blocks all unknown executables. From 6645baa6ab2dceabbfd78152cbfa22fee27370e3 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 1 Oct 2019 13:52:20 +0500 Subject: [PATCH 06/10] Update windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- ...specify-cloud-protection-level-windows-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md index dfcc449384..ddb892ef7b 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md @@ -62,7 +62,7 @@ For more information about Intune device profiles, including how to create and c 1. Double-click the **Select cloud protection level** setting and set it to **Enabled**. Select the level of protection: 1. **Default Windows Defender Antivirus blocking level** provides strong detection without increasing the risk of detecting legitimate files. - 2. Setting to **High blocking level** applies a strong level of detection while optimizing client performace (greater chances of false positives). + 2. **High blocking level** applies a strong level of detection while optimizing client performance (greater chance of false positives). 3. **High + blocking level** applies additional protection measures(may impact client performance and increase rsik of false positives). 4. **Zero tolerance blocking level** blocks all unknown executables. From 75fa46976331ccf6ab2871090965bdea8eb8538a Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 1 Oct 2019 13:52:28 +0500 Subject: [PATCH 07/10] Update windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- ...specify-cloud-protection-level-windows-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md index ddb892ef7b..d4a2acd94c 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md @@ -63,7 +63,7 @@ For more information about Intune device profiles, including how to create and c 1. Double-click the **Select cloud protection level** setting and set it to **Enabled**. Select the level of protection: 1. **Default Windows Defender Antivirus blocking level** provides strong detection without increasing the risk of detecting legitimate files. 2. **High blocking level** applies a strong level of detection while optimizing client performance (greater chance of false positives). - 3. **High + blocking level** applies additional protection measures(may impact client performance and increase rsik of false positives). + 3. **High + blocking level** applies additional protection measures (may impact client performance and increase risk of false positives). 4. **Zero tolerance blocking level** blocks all unknown executables. > [!WARNING] From 51d979b5c85e7e444d6258556152a59a6d453583 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 1 Oct 2019 13:52:36 +0500 Subject: [PATCH 08/10] Update windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- ...specify-cloud-protection-level-windows-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md index d4a2acd94c..49d981eaea 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md @@ -67,7 +67,7 @@ For more information about Intune device profiles, including how to create and c 4. **Zero tolerance blocking level** blocks all unknown executables. > [!WARNING] - > While unlikely, setting this switch to **High** and **High +** might cause some legitimate files to be detected (although you will have the option to unblock or dispute that detection). + > While unlikely, setting this switch to **High** or **High +** may cause some legitimate files to be detected (although you will have the option to unblock or dispute that detection). 6. Click **OK**. From 640a05aeb03b2822f4be3b08b2756baf7068dfec Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 1 Oct 2019 22:08:59 +0500 Subject: [PATCH 09/10] Update windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md Co-Authored-By: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- ...specify-cloud-protection-level-windows-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md index 49d981eaea..2fc1c82630 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md @@ -39,7 +39,7 @@ You can specify the level of cloud-protection offered by Windows Defender Antivi 1. **High**: Applies a strong level of detection. 2. **High +**: Uses the **High** level and applies additional protection measures (may impact client performance). - 3. **Zero tolerance**: Block all unknown executables. + 3. **Zero tolerance**: Blocks all unknown executables. 8. Click **OK** to exit the **Windows Defender Antivirus** settings pane, click **OK** to exit the **Device restrictions** pane, and then click **Save** to save the changes to your **Device restrictions** profile. From d964eb712be0e0fcffb03c7d1271e864be5336b0 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 1 Oct 2019 22:09:19 +0500 Subject: [PATCH 10/10] Update windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- ...specify-cloud-protection-level-windows-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md index 2fc1c82630..f8a9335f5f 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus.md @@ -61,7 +61,7 @@ For more information about Intune device profiles, including how to create and c 5. Expand the tree to **Windows components > Windows Defender Antivirus > MpEngine**. 1. Double-click the **Select cloud protection level** setting and set it to **Enabled**. Select the level of protection: - 1. **Default Windows Defender Antivirus blocking level** provides strong detection without increasing the risk of detecting legitimate files. + 1. **Default Windows Defender Antivirus blocking level** provides strong detection without increasing the risk of detecting legitimate files. 2. **High blocking level** applies a strong level of detection while optimizing client performance (greater chance of false positives). 3. **High + blocking level** applies additional protection measures (may impact client performance and increase risk of false positives). 4. **Zero tolerance blocking level** blocks all unknown executables.