mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-28 13:17:23 +00:00
Document automatic definition update setting
This commit is contained in:
parent
81318210c8
commit
7f1be48fa6
@ -259,18 +259,29 @@ Determines whether suspicious samples (that are likely to contain threats) are s
|
||||
| **Data type** | String |
|
||||
| **Possible values** | none <br/> safe (default) <br/> all |
|
||||
|
||||
#### Enable / disable automatic security intelligence updates
|
||||
|
||||
Determines whether security intelligence updates are installed automatically:
|
||||
|
||||
|||
|
||||
|:---|:---|
|
||||
| **Key** | automaticDefinitionUpdateEnabled |
|
||||
| **Data type** | Boolean |
|
||||
| **Possible values** | true (default) <br/> false |
|
||||
|
||||
## Recommended configuration profile
|
||||
|
||||
To get started, we recommend the following configuration profile for your enterprise to take advantage of all protection features that Microsoft Defender ATP provides.
|
||||
|
||||
The following configuration profile will:
|
||||
|
||||
- Enable real-time protection (RTP).
|
||||
- Enable real-time protection (RTP)
|
||||
- Specify how the following threat types are handled:
|
||||
- **Potentially unwanted applications (PUA)** are blocked.
|
||||
- **Archive bombs** (file with a high compression rate) are audited to the product logs.
|
||||
- Enable cloud-delivered protection.
|
||||
- Enable automatic sample submission at `safe` level.
|
||||
- **Potentially unwanted applications (PUA)** are blocked
|
||||
- **Archive bombs** (file with a high compression rate) are audited to the product logs
|
||||
- Enable automatic security intelligence updates
|
||||
- Enable cloud-delivered protection
|
||||
- Enable automatic sample submission at `safe` level
|
||||
|
||||
### Sample profile
|
||||
|
||||
@ -290,6 +301,7 @@ The following configuration profile will:
|
||||
]
|
||||
},
|
||||
"cloudService":{
|
||||
"automaticDefinitionUpdateEnabled":true,
|
||||
"automaticSampleSubmissionConsent":"safe",
|
||||
"enabled":true
|
||||
}
|
||||
@ -350,7 +362,8 @@ The following configuration profile contains entries for all settings described
|
||||
"cloudService":{
|
||||
"enabled":true,
|
||||
"diagnosticLevel":"optional",
|
||||
"automaticSampleSubmissionConsent":"safe"
|
||||
"automaticSampleSubmissionConsent":"safe",
|
||||
"automaticDefinitionUpdateEnabled":true
|
||||
}
|
||||
}
|
||||
```
|
||||
|
@ -277,6 +277,16 @@ Determines whether suspicious samples (that are likely to contain threats) are s
|
||||
| **Data type** | Boolean |
|
||||
| **Possible values** | true (default) <br/> false |
|
||||
|
||||
#### Enable / disable automatic security intelligence updates
|
||||
|
||||
Determines whether security intelligence updates are installed automatically:
|
||||
|
||||
|||
|
||||
|:---|:---|
|
||||
| **Key** | automaticDefinitionUpdateEnabled |
|
||||
| **Data type** | Boolean |
|
||||
| **Possible values** | true (default) <br/> false |
|
||||
|
||||
### User interface preferences
|
||||
|
||||
Manage the preferences for the user interface of Microsoft Defender ATP for Mac.
|
||||
@ -358,6 +368,7 @@ The following configuration profile (or, in case of JAMF, a property list that c
|
||||
- Specify how the following threat types are handled:
|
||||
- **Potentially unwanted applications (PUA)** are blocked
|
||||
- **Archive bombs** (file with a high compression rate) are audited to Microsoft Defender ATP logs
|
||||
- Enable automatic security intelligence updates
|
||||
- Enable cloud-delivered protection
|
||||
- Enable automatic sample submission
|
||||
|
||||
@ -394,6 +405,8 @@ The following configuration profile (or, in case of JAMF, a property list that c
|
||||
<true/>
|
||||
<key>automaticSampleSubmission</key>
|
||||
<true/>
|
||||
<key>automaticDefinitionUpdateEnabled</key>
|
||||
<true/>
|
||||
</dict>
|
||||
</dict>
|
||||
</plist>
|
||||
@ -471,6 +484,8 @@ The following configuration profile (or, in case of JAMF, a property list that c
|
||||
<true/>
|
||||
<key>automaticSampleSubmission</key>
|
||||
<true/>
|
||||
<key>automaticDefinitionUpdateEnabled</key>
|
||||
<true/>
|
||||
</dict>
|
||||
</dict>
|
||||
</array>
|
||||
@ -563,6 +578,8 @@ The following templates contain entries for all settings described in this docum
|
||||
<string>optional</string>
|
||||
<key>automaticSampleSubmission</key>
|
||||
<true/>
|
||||
<key>automaticDefinitionUpdateEnabled</key>
|
||||
<true/>
|
||||
</dict>
|
||||
<key>edr</key>
|
||||
<dict>
|
||||
@ -701,6 +718,8 @@ The following templates contain entries for all settings described in this docum
|
||||
<string>optional</string>
|
||||
<key>automaticSampleSubmission</key>
|
||||
<true/>
|
||||
<key>automaticDefinitionUpdateEnabled</key>
|
||||
<true/>
|
||||
</dict>
|
||||
<key>edr</key>
|
||||
<dict>
|
||||
|
Loading…
x
Reference in New Issue
Block a user