From b83b64fbcaa2c86bebb0bc14df83a3e694e0a6cb Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 11 Jun 2020 16:32:44 -0700 Subject: [PATCH] Update symantec-to-microsoft-defender-atp-part2.md --- .../symantec-to-microsoft-defender-atp-part2.md | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-part2.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-part2.md index 5e9a3c08ba..92de0cc4aa 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-part2.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-part2.md @@ -38,9 +38,16 @@ This procedure applies to devices running any of the following versions of Windo For those versions of Windows, you should set the registry key for Microsoft Defender ATP to passive mode. -HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection -ForceDefenderPassiveMode (dword) 1 (hex) -Note: You can use “Group Policy Preference” (GPP) or LGPO or a “Package” in SCCM. +1. As an administrator on the device, open Registry Editor. + +2. Navigate to `Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Windows Advanced Threat Protection`. + +3. Edit (or create) a DWORD entry called **ForceDefenderPassiveMode**, and specify the following settings: + - Set the DWORD's value to 1. + - Under **Base**, select **Hexidecimal**. + +> [!NOTE] +> You can use [Group Policy Preference](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn581922(v=ws.11)), [Local Group Policy Object tool](https://docs.microsoft.com/windows/security/threat-protection/security-compliance-toolkit-10#what-is-the-local-group-policy-object-lgpo-tool), or a [package in Configuration Manager](https://docs.microsoft.com/mem/configmgr/apps/deploy-use/packages-and-programs) to perform this task. ## Re-enable Microsoft Defender Antivirus