Update symantec-to-microsoft-defender-atp-part2.md

This commit is contained in:
Denise Vangel-MSFT
2020-06-11 16:18:13 -07:00
parent e430a3eb97
commit 97ca3f81b3

View File

@ -29,7 +29,15 @@ ms.topic: article
*This is from the Word doc - needs revision and clarification* *This is from the Word doc - needs revision and clarification*
Set the registry key for Passive Mode in Windows Server 2016, Windows Server, 1803 (Core only mode) and Windows Server 2019. *QUESTION: How/why are we changing registry keys when we haven't onboarded these devices yet? Am I missing something?*
This procedure applies to devices running any of the following versions of Windows:
- Windows Server 2016
- Windows Server, version 1803 (core-only mode)
- Windows Server 2019
For those versions of Windows, you should set the registry key for Microsoft Defender ATP to passive mode.
HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection
ForceDefenderPassiveMode (dword) 1 (hex) ForceDefenderPassiveMode (dword) 1 (hex)
Note: You can use “Group Policy Preference” (GPP) or LGPO or a “Package” in SCCM. Note: You can use “Group Policy Preference” (GPP) or LGPO or a “Package” in SCCM.