mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-15 14:57:23 +00:00
Merged PR 3865: Merge wdav to master
This commit is contained in:
commit
b9df05d6a4
@ -1,5 +1,20 @@
|
|||||||
# [Threat protection](index.md)
|
# [Threat protection](index.md)
|
||||||
## [Windows Defender Security Center](windows-defender-security-center\windows-defender-security-center.md)
|
|
||||||
|
|
||||||
|
## [The Windows Defender Security Center app](windows-defender-security-center\windows-defender-security-center.md)
|
||||||
|
### [Customize the Windows Defender Security Center app for your organization](windows-defender-security-center\wdsc-customize-contact-information.md)
|
||||||
|
### [Hide Windows Defender Security Center app notifications](windows-defender-security-center\wdsc-hide-notifications.md)
|
||||||
|
### [Virus and threat protection](windows-defender-security-center\wdsc-virus-threat-protection.md)
|
||||||
|
### [Device performance and health](windows-defender-security-center\wdsc-device-performance-health.md)
|
||||||
|
### [Firewall and network protection](windows-defender-security-center\wdsc-firewall-network-protection.md)
|
||||||
|
### [App and browser control](windows-defender-security-center\wdsc-app-browser-control.md)
|
||||||
|
### [Family options](windows-defender-security-center\wdsc-family-options.md)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [Windows Defender Advanced Threat Protection](windows-defender-atp\windows-defender-advanced-threat-protection.md)
|
## [Windows Defender Advanced Threat Protection](windows-defender-atp\windows-defender-advanced-threat-protection.md)
|
||||||
### [Minimum requirements](windows-defender-atp\minimum-requirements-windows-defender-advanced-threat-protection.md)
|
### [Minimum requirements](windows-defender-atp\minimum-requirements-windows-defender-advanced-threat-protection.md)
|
||||||
### [Validate licensing and complete setup](windows-defender-atp\licensing-windows-defender-advanced-threat-protection.md)
|
### [Validate licensing and complete setup](windows-defender-atp\licensing-windows-defender-advanced-threat-protection.md)
|
||||||
|
@ -22,7 +22,7 @@ ms.date: 10/02/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10, version 1609
|
- Windows 10, version 1703
|
||||||
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
@ -87,7 +87,7 @@ Uninstall-WindowsFeature -Name Windows-Defender-GUI
|
|||||||
|
|
||||||
You can also uninstall Windows Defender AV completely with the **Remove Roles and Features Wizard** by deselecting the **Windows Defender Features** option at the **Features** step in the wizard.
|
You can also uninstall Windows Defender AV completely with the **Remove Roles and Features Wizard** by deselecting the **Windows Defender Features** option at the **Features** step in the wizard.
|
||||||
|
|
||||||
This is useful if you have a third-party antivirus product installed on the machine already. Multiple AV products can cause problems when installed and actively running on the same machine. See the question "Should I run Microsoft security software at the same time as other security products?" on the [Windows Defender Security Intelligence Antivirus and antimalware software FAQ](https://www.microsoft.com/en-us/wdsi/help/antimalware-faq).
|
This is useful if you have a third-party antivirus product installed on the machine already. Multiple AV products can cause problems when installed and actively running on the same machine. See the question "Should I run Microsoft security software at the same time as other security products?" on the [Windows Defender Security Intelligence Antivirus and antimalware software FAQ](https://www.microsoft.com/en-us/wdsi/help/antimalware-faq#multiple-products).
|
||||||
|
|
||||||
>[!NOTE]
|
>[!NOTE]
|
||||||
>Deselecting **Windows Defender** on its own under the **Windows Defender Features** section will automatically prompt you to remove the interface option **GUI for Windows Defender**.
|
>Deselecting **Windows Defender** on its own under the **Windows Defender Features** section will automatically prompt you to remove the interface option **GUI for Windows Defender**.
|
||||||
|
@ -21,9 +21,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
@ -64,10 +64,10 @@ Rule name | GUIDs
|
|||||||
Block executable content from email client and webmail | BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550
|
Block executable content from email client and webmail | BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550
|
||||||
Block Office applications from creating child processes | D4F940AB-401B-4EFC-AADC-AD5F3C50688A
|
Block Office applications from creating child processes | D4F940AB-401B-4EFC-AADC-AD5F3C50688A
|
||||||
Block Office applications from creating executable content | 3B576869-A4EC-4529-8536-B80A7769E899
|
Block Office applications from creating executable content | 3B576869-A4EC-4529-8536-B80A7769E899
|
||||||
Block Office applications from injecting into other processes | 75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84
|
Block Office applications from injecting code into other processes | 75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84
|
||||||
Impede JavaScript and VBScript to launch executables | D3E037E1-3EB8-44C8-A917-57927947596D
|
Block JavaScript or VBScript from launching downloaded executable content | D3E037E1-3EB8-44C8-A917-57927947596D
|
||||||
Block execution of potentially obfuscated scripts | 5BEB7EFE-FD9A-4556-801D-275E5FFC04CC
|
Block execution of potentially obfuscated scripts | 5BEB7EFE-FD9A-4556-801D-275E5FFC04CC
|
||||||
Block Win32 imports from Macro code in Office | 92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B
|
Block Win32 API calls from Office macro | 92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B
|
||||||
|
|
||||||
|
|
||||||
### Rule: Block executable content from email client and webmail
|
### Rule: Block executable content from email client and webmail
|
||||||
@ -94,7 +94,7 @@ This rule targets typical behaviors used by suspicious and malicious add-ons and
|
|||||||
Extensions will be blocked from being used by Office apps. Typically these extensions use the Windows Scripting Host (.wsh files) to run scripts that automate certain tasks or provide user-created add-on features.
|
Extensions will be blocked from being used by Office apps. Typically these extensions use the Windows Scripting Host (.wsh files) to run scripts that automate certain tasks or provide user-created add-on features.
|
||||||
|
|
||||||
|
|
||||||
### Rule: Block Office applications from injecting into other processes
|
### Rule: Block Office applications from injecting code into other processes
|
||||||
|
|
||||||
|
|
||||||
Office apps, such as Word, Excel, or PowerPoint, will not be able to inject code into other processes.
|
Office apps, such as Word, Excel, or PowerPoint, will not be able to inject code into other processes.
|
||||||
@ -103,7 +103,7 @@ This is typically used by malware to run malicious code in an attempt to hide th
|
|||||||
|
|
||||||
|
|
||||||
|
|
||||||
### Rule: Impede JavaScript and VBScript to launch executables
|
### Rule: Block JavaScript ok VBScript From launching downloaded executable content
|
||||||
|
|
||||||
JavaScript and VBScript scripts can be used by malware to launch other malicious apps.
|
JavaScript and VBScript scripts can be used by malware to launch other malicious apps.
|
||||||
|
|
||||||
@ -119,7 +119,11 @@ This rule prevents scripts that appear to be obfuscated from running.
|
|||||||
|
|
||||||
It uses the [AntiMalwareScanInterface (AMSI)](https://msdn.microsoft.com/en-us/library/windows/desktop/dn889587(v=vs.85).aspx) to determine if a script is potentially obfuscated, and then blocks such a script, or blocks scripts when an attempt is made to access them.
|
It uses the [AntiMalwareScanInterface (AMSI)](https://msdn.microsoft.com/en-us/library/windows/desktop/dn889587(v=vs.85).aspx) to determine if a script is potentially obfuscated, and then blocks such a script, or blocks scripts when an attempt is made to access them.
|
||||||
|
|
||||||
|
### Rule: Block Win32 API calls from Office macro
|
||||||
|
|
||||||
|
Malware can use macro code in Office files to import and load Win32 DLLs, which can then be used to make API calls to allow further infection throughout the system.
|
||||||
|
|
||||||
|
This rule attempts to block Office files that contain macro code that is capable of importing Win32 DLLs.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
@ -19,9 +19,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -21,9 +21,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -18,9 +18,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -21,9 +21,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -18,9 +18,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -21,9 +21,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview, build 16232 and later
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -20,9 +20,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -21,9 +21,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -21,9 +21,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -20,9 +20,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -19,9 +19,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -19,9 +19,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -20,9 +20,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -20,9 +20,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -21,9 +21,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -21,9 +21,9 @@ ms.author: iawilt
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -21,9 +21,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
<svg width="1rem" height="1rem" xmlns='http://www.w3.org/2000/svg' viewBox='0 0 140 140'>
|
<svg width="15px" height="15px" xmlns='http://www.w3.org/2000/svg' viewBox='0 0 140 140'>
|
||||||
<title>Check mark no</title>
|
<title>Check mark no</title>
|
||||||
<polygon
|
<polygon
|
||||||
fill='#d83b01'
|
fill='#d83b01'
|
||||||
|
Before Width: | Height: | Size: 302 B After Width: | Height: | Size: 302 B |
@ -1,4 +1,4 @@
|
|||||||
<svg width="1rem" height="1rem" xmlns='http://www.w3.org/2000/svg' viewBox='0 0 140 140'>
|
<svg width="15px" height="15px" xmlns='http://www.w3.org/2000/svg' viewBox='0 0 140 140'>
|
||||||
<title>Check mark yes</title>
|
<title>Check mark yes</title>
|
||||||
<path
|
<path
|
||||||
fill='#0E8915'
|
fill='#0E8915'
|
||||||
|
Before Width: | Height: | Size: 222 B After Width: | Height: | Size: 222 B |
@ -21,9 +21,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -20,9 +20,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -21,9 +21,9 @@ ms.date: 08/25/2017
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10 Insider Preview
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
|
||||||
[!include[Prerelease information](prerelease.md)]
|
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
|
@ -0,0 +1,76 @@
|
|||||||
|
---
|
||||||
|
title: App & browser control in the Windows Defender Security Center app
|
||||||
|
description: Use the App & browser control section to see and configure Windows Defender SmartScreen and Exploit protection settings.
|
||||||
|
keywords: wdav, smartscreen, antivirus, wdsc, exploit, protection, hide
|
||||||
|
search.product: eADQiWindows 10XVcnh
|
||||||
|
ms.pagetype: security
|
||||||
|
ms.prod: w10
|
||||||
|
ms.mktglfcycl: manage
|
||||||
|
ms.sitesec: library
|
||||||
|
ms.pagetype: security
|
||||||
|
ms.localizationpriority: medium
|
||||||
|
author: iaanw
|
||||||
|
ms.author: iawilt
|
||||||
|
ms.date: 10/16/2017
|
||||||
|
---
|
||||||
|
|
||||||
|
|
||||||
|
# App and browser control
|
||||||
|
|
||||||
|
**Applies to**
|
||||||
|
|
||||||
|
- Windows 10, version 1703 and later
|
||||||
|
|
||||||
|
|
||||||
|
The **App and browser control** section contains information and settings for Windows Defender SmartScreen. IT administrators and IT pros can get configuration guidance from the [Windows Defender SmartScreen documentation library](https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview).
|
||||||
|
|
||||||
|
In Windows 10, version 1709, the section also provides configuration options for Exploit protection. You can prevent users from modifying these specific options with Group Policy. IT administrators can get more information at the [Exploit protection](../windows-defender-exploit-guard/exploit-protection-exploit-guard.md) topic in the Windows Defender Exploit Guard library.
|
||||||
|
|
||||||
|
You can also choose to hide the section from users of the machine. This can be useful if you don't want employees in your organization to see or have access to user-configured options for the features shown in the section.
|
||||||
|
|
||||||
|
|
||||||
|
## Prevent users from making changes to the Exploit protection area in the App & browser control section
|
||||||
|
|
||||||
|
You can prevent users from modifying settings in the Exploit protection area. The settings will be either greyed out or not appear if you enable this setting. Users will still have access to other settings in the App & browser control section, such as those for Windows Defender SmartScreen, unless those options have been configured separately.
|
||||||
|
|
||||||
|
You can only prevent users from modifying Exploit protection settings by using Group Policy.
|
||||||
|
|
||||||
|
>[!IMPORTANT]
|
||||||
|
>### Requirements
|
||||||
|
>
|
||||||
|
>You must have Windows 10, version 1709 (the Fall Creators Update). The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings.
|
||||||
|
|
||||||
|
1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
|
||||||
|
|
||||||
|
3. In the **Group Policy Management Editor** go to **Computer configuration**.
|
||||||
|
|
||||||
|
4. Click **Policies** then **Administrative templates**.
|
||||||
|
|
||||||
|
5. Expand the tree to **Windows components > Windows Defender Security Center > App and browser protection**.
|
||||||
|
|
||||||
|
6. Open the **Prevent users from modifying settings** setting and set it to **Enabled**. Click **OK**.
|
||||||
|
|
||||||
|
7. [Deploy the updated GPO as you normally do](https://msdn.microsoft.com/en-us/library/ee663280(v=vs.85).aspx).
|
||||||
|
|
||||||
|
## Hide the App & browser control section
|
||||||
|
|
||||||
|
You can choose to hide the entire section by using Group Policy. The section will not appear on the home page of the Windows Defender Security Center app, and its icon will not be shown on the navigiation bar on the side of the app.
|
||||||
|
|
||||||
|
This can only be done in Group Policy.
|
||||||
|
|
||||||
|
>[!IMPORTANT]
|
||||||
|
>### Requirements
|
||||||
|
>
|
||||||
|
>You must have Windows 10, version 1709 (the Fall Creators Update). The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings.
|
||||||
|
|
||||||
|
1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
|
||||||
|
|
||||||
|
3. In the **Group Policy Management Editor** go to **Computer configuration**.
|
||||||
|
|
||||||
|
4. Click **Policies** then **Administrative templates**.
|
||||||
|
|
||||||
|
5. Expand the tree to **Windows components > Windows Defender Security Center > App and browser protection**.
|
||||||
|
|
||||||
|
6. Open the **Hide the App and browser protection area** setting and set it to **Enabled**. Click **OK**.
|
||||||
|
|
||||||
|
7. [Deploy the updated GPO as you normally do](https://msdn.microsoft.com/en-us/library/ee663280(v=vs.85).aspx).
|
@ -0,0 +1,82 @@
|
|||||||
|
---
|
||||||
|
title: Customize Windows Defender Security Center contact information
|
||||||
|
description: Provide information to your employees on how to contact your IT department when a security issue occurs
|
||||||
|
keywords: wdsc, security center, defender, notification, customize, contact, it department, help desk, call, help site
|
||||||
|
search.product: eADQiWindows 10XVcnh
|
||||||
|
ms.pagetype: security
|
||||||
|
ms.prod: w10
|
||||||
|
ms.mktglfcycl: manage
|
||||||
|
ms.sitesec: library
|
||||||
|
ms.pagetype: security
|
||||||
|
ms.localizationpriority: medium
|
||||||
|
author: iaanw
|
||||||
|
ms.author: iawilt
|
||||||
|
ms.date: 10/16/2017
|
||||||
|
---
|
||||||
|
|
||||||
|
# Customize the Windows Defender Security Center app for your organization
|
||||||
|
|
||||||
|
**Applies to**
|
||||||
|
|
||||||
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
**Audience**
|
||||||
|
|
||||||
|
- Enterprise security administrators
|
||||||
|
|
||||||
|
**Manageability available with**
|
||||||
|
|
||||||
|
- Group Policy
|
||||||
|
|
||||||
|
You can add information about your organization in a contact card to the Windows Defender Security Center app. This can include a link to a support site, a phone number for a help desk, and an email address for email-based support.
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|
This information will also be shown in some enterprise-specific notifications (including those for [Windows Defender Exploit Guard](/windows/threat-protection/windows-defender-exploit-guard/windows-defender-exploit-guard), the [Block at first sight feature](/windows/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus), and [potentially unwanted applications](/windows/threat-protection/windows-defender-antivirus/detect-block-potentially-unwanted-apps-windows-defender-antivirus).
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|
|
||||||
|
Users can click on the displayed information to initiate a support request:
|
||||||
|
- Clicking **Call** or the phone number will open Skype to start a call to the displayed number
|
||||||
|
- Clicking **Email** or the email address will create a new email in the machine's default email app address to the displayed email
|
||||||
|
- Clicking **Help portal** or the website URL will open the machine's default web browser and go to the displayed address
|
||||||
|
|
||||||
|
## Requirements
|
||||||
|
|
||||||
|
You must have Windows 10, version 1709 (the Fall Creators Update). The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings.
|
||||||
|
|
||||||
|
## Use Group Policy to enable and customize contact information
|
||||||
|
|
||||||
|
There are two stages to using the contact card and customized notifications. First, you have to enable the contact card or custom notifications (or both), and then you must specify at least a name for your organization and one piece of contact information.
|
||||||
|
|
||||||
|
This can only be done in Group Policy.
|
||||||
|
|
||||||
|
1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
|
||||||
|
|
||||||
|
3. In the **Group Policy Management Editor** go to **Computer configuration**.
|
||||||
|
|
||||||
|
4. Click **Policies** then **Administrative templates**.
|
||||||
|
|
||||||
|
5. Expand the tree to **Windows components > Windows Defender Security Center > Enterprise Customization**.
|
||||||
|
|
||||||
|
6. You enable the contact card and the customized notifications by configuring two separate Group Policy settings. They will both use the same source of information (explained in Steps 7 and 8), and you can enable both or only one or the other:
|
||||||
|
|
||||||
|
1. To enable the contact card, open the **Configure customized contact information** setting and set it to **Enabled**. Click **OK**.
|
||||||
|
|
||||||
|
2. To enable the customized notifications, open the **Configure customized notifications** setting and set it to **Enabled**. Click **OK**.
|
||||||
|
|
||||||
|
7. After you've enabled the contact card or the customized notifications (or both), you must configure the **Specify contact company name** to **Enabled**. Enter your company or organization's name in the field in the **Options** section. Click **OK**.
|
||||||
|
|
||||||
|
8. To ensure the custom notifications or contact card appear, you must also configure at least one of the following settings by opening them, setting them to **Enabled** and adding the contact information in the field under **Options**:
|
||||||
|
1. **Specify contact email address or Email ID**
|
||||||
|
2. **Specify contact phone number or Skype ID**
|
||||||
|
3. **Specify contact website**
|
||||||
|
|
||||||
|
9. Click **OK** after configuring each setting to save your changes.
|
||||||
|
|
||||||
|
|
||||||
|
>[!IMPORTANT]
|
||||||
|
>You must specify the contact company name and at least one contact method - email, phone number, or website URL. If you do not specify the contact name and a contact method the customization will not apply, the contact card will not show, and notifications will not be customized.
|
||||||
|
|
||||||
|
|
@ -0,0 +1,55 @@
|
|||||||
|
---
|
||||||
|
title: Device & performance health in the Windows Defender Security Center app
|
||||||
|
description: Use the Device & performance health section to see the status of the machine and note any storage, update, battery, driver, or hardware configuration issues
|
||||||
|
keywords: wdsc, windows update, storage, driver, device, installation, battery, health, status
|
||||||
|
search.product: eADQiWindows 10XVcnh
|
||||||
|
ms.pagetype: security
|
||||||
|
ms.prod: w10
|
||||||
|
ms.mktglfcycl: manage
|
||||||
|
ms.sitesec: library
|
||||||
|
ms.pagetype: security
|
||||||
|
ms.localizationpriority: medium
|
||||||
|
author: iaanw
|
||||||
|
ms.author: iawilt
|
||||||
|
ms.date: 10/16/2017
|
||||||
|
---
|
||||||
|
|
||||||
|
|
||||||
|
# Device performance and health
|
||||||
|
|
||||||
|
**Applies to**
|
||||||
|
|
||||||
|
- Windows 10, version 1703 and later
|
||||||
|
|
||||||
|
|
||||||
|
The **Device performance & health** section contains information about hardware, devices, and drivers related to the machine. IT administrators and IT pros should reference the appropriate documentation library for the issues they are seeing, such as the [configure the Load and unload device drivers security policy setting](https://docs.microsoft.com/en-us/windows/device-security/security-policy-settings/load-and-unload-device-drivers) and how to [deploy drivers during Windows 10 deployment using System Center Configuration Manager](https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-sccm/add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager).
|
||||||
|
|
||||||
|
The [Windows 10 IT pro troubleshooting topic](https://docs.microsoft.com/en-us/windows/client-management/windows-10-support-solutions), and the main [Windows 10 documentation library](https://docs.microsoft.com/en-us/windows/windows-10/) can also be helpful for resolving issues.
|
||||||
|
|
||||||
|
|
||||||
|
In Windows 10, version 1709, the section can be hidden from users of the machine. This can be useful if you don't want employees in your organization to see or have access to user-configured options for the features shown in the section.
|
||||||
|
|
||||||
|
|
||||||
|
## Hide the Device performance & health section
|
||||||
|
|
||||||
|
You can choose to hide the entire section by using Group Policy. The section will not appear on the home page of the Windows Defender Security Center app, and its icon will not be shown on the navigiation bar on the side of the app.
|
||||||
|
|
||||||
|
This can only be done in Group Policy.
|
||||||
|
|
||||||
|
>[!IMPORTANT]
|
||||||
|
>### Requirements
|
||||||
|
>
|
||||||
|
>You must have Windows 10, version 1709 (the Fall Creators Update). The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings.
|
||||||
|
|
||||||
|
1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
|
||||||
|
|
||||||
|
3. In the **Group Policy Management Editor** go to **Computer configuration**.
|
||||||
|
|
||||||
|
4. Click **Policies** then **Administrative templates**.
|
||||||
|
|
||||||
|
5. Expand the tree to **Windows components > Windows Defender Security Center > Device performance and health**.
|
||||||
|
|
||||||
|
6. Open the **Hide the Device performance and health area** setting and set it to **Enabled**. Click **OK**.
|
||||||
|
|
||||||
|
7. [Deploy the updated GPO as you normally do](https://msdn.microsoft.com/en-us/library/ee663280(v=vs.85).aspx).
|
||||||
|
|
@ -0,0 +1,53 @@
|
|||||||
|
---
|
||||||
|
title: Family options in the Windows Defender Security Center app
|
||||||
|
description: Hide the Family options section in enterprise environments
|
||||||
|
keywords: wdsc, family options, hide, suppress, remove, disable, uninstall, kids, parents, safety, parental, child, screen time
|
||||||
|
search.product: eADQiWindows 10XVcnh
|
||||||
|
ms.pagetype: security
|
||||||
|
ms.prod: w10
|
||||||
|
ms.mktglfcycl: manage
|
||||||
|
ms.sitesec: library
|
||||||
|
ms.pagetype: security
|
||||||
|
ms.localizationpriority: medium
|
||||||
|
author: iaanw
|
||||||
|
ms.author: iawilt
|
||||||
|
ms.date: 10/16/2017
|
||||||
|
---
|
||||||
|
|
||||||
|
|
||||||
|
# Family options
|
||||||
|
|
||||||
|
**Applies to**
|
||||||
|
|
||||||
|
- Windows 10, version 1703 and later
|
||||||
|
|
||||||
|
|
||||||
|
The **Family options** section contains links to settings and further information for parents of a Windows 10 PC. It is not generally intended for enterprise or business environments.
|
||||||
|
|
||||||
|
Home users can learn more at the [Help protection your family online in Windows Defender Security Center topic at support.microsoft.com](https://support.microsoft.com/en-us/help/4013209/windows-10-protect-your-family-online-in-windows-defender)
|
||||||
|
|
||||||
|
In Windows 10, version 1709, the section can be hidden from users of the machine. This can be useful if you don't want employees in your organization to see or have access to this section.
|
||||||
|
|
||||||
|
|
||||||
|
## Hide the Family options section
|
||||||
|
|
||||||
|
You can choose to hide the entire section by using Group Policy. The section will not appear on the home page of the Windows Defender Security Center app, and its icon will not be shown on the navigiation bar on the side of the app.
|
||||||
|
|
||||||
|
This can only be done in Group Policy.
|
||||||
|
|
||||||
|
>[!IMPORTANT]
|
||||||
|
>### Requirements
|
||||||
|
>
|
||||||
|
>You must have Windows 10, version 1709 (the Fall Creators Update). The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings.
|
||||||
|
|
||||||
|
1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
|
||||||
|
|
||||||
|
3. In the **Group Policy Management Editor** go to **Computer configuration**.
|
||||||
|
|
||||||
|
4. Click **Policies** then **Administrative templates**.
|
||||||
|
|
||||||
|
5. Expand the tree to **Windows components > Windows Defender Security Center > Family options**.
|
||||||
|
|
||||||
|
6. Open the **Hide the Family options area** setting and set it to **Enabled**. Click **OK**.
|
||||||
|
|
||||||
|
7. [Deploy the updated GPO as you normally do](https://msdn.microsoft.com/en-us/library/ee663280(v=vs.85).aspx).
|
@ -0,0 +1,52 @@
|
|||||||
|
---
|
||||||
|
title: Firewall and network protection in the Windows Defender Security Center app
|
||||||
|
description: Use the Firewall & network protection section to see the status of and make changes to firewalls and network connections for the machine.
|
||||||
|
keywords: wdsc, firewall, windows defender firewall, network, connections, domain, private network, publish network, allow firewall, firewall rule, block firewall
|
||||||
|
search.product: eADQiWindows 10XVcnh
|
||||||
|
ms.pagetype: security
|
||||||
|
ms.prod: w10
|
||||||
|
ms.mktglfcycl: manage
|
||||||
|
ms.sitesec: library
|
||||||
|
ms.pagetype: security
|
||||||
|
ms.localizationpriority: medium
|
||||||
|
author: iaanw
|
||||||
|
ms.author: iawilt
|
||||||
|
ms.date: 10/16/2017
|
||||||
|
---
|
||||||
|
|
||||||
|
|
||||||
|
# Firewall and network protection
|
||||||
|
|
||||||
|
**Applies to**
|
||||||
|
|
||||||
|
- Windows 10, version 1703 and later
|
||||||
|
|
||||||
|
|
||||||
|
The **Firewall & network protection** section contains information about the firewalls and network connections used by the machine, including the status of Windows Defender Firewall and any other third-party firewalls. IT administrators and IT pros can get configuration guidance from the [Windows Defender Firewall with Advanced Security documentation library](https://docs.microsoft.com/en-us/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security).
|
||||||
|
|
||||||
|
In Windows 10, version 1709, the section can be hidden from users of the machine. This can be useful if you don't want employees in your organization to see or have access to user-configured options for the features shown in the section.
|
||||||
|
|
||||||
|
|
||||||
|
## Hide the Firewall & network protection section
|
||||||
|
|
||||||
|
You can choose to hide the entire section by using Group Policy. The section will not appear on the home page of the Windows Defender Security Center app, and its icon will not be shown on the navigiation bar on the side of the app.
|
||||||
|
|
||||||
|
This can only be done in Group Policy.
|
||||||
|
|
||||||
|
>[!IMPORTANT]
|
||||||
|
>### Requirements
|
||||||
|
>
|
||||||
|
>You must have Windows 10, version 1709 (the Fall Creators Update). The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings.
|
||||||
|
|
||||||
|
1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
|
||||||
|
|
||||||
|
3. In the **Group Policy Management Editor** go to **Computer configuration**.
|
||||||
|
|
||||||
|
4. Click **Policies** then **Administrative templates**.
|
||||||
|
|
||||||
|
5. Expand the tree to **Windows components > Windows Defender Security Center > Firewall and network protection**.
|
||||||
|
|
||||||
|
6. Open the **Hide the Firewall and network protection area** setting and set it to **Enabled**. Click **OK**.
|
||||||
|
|
||||||
|
7. [Deploy the updated GPO as you normally do](https://msdn.microsoft.com/en-us/library/ee663280(v=vs.85).aspx).
|
||||||
|
|
@ -0,0 +1,91 @@
|
|||||||
|
---
|
||||||
|
title: Hide notifications from the Windows Defender Security Center app
|
||||||
|
description: Prevent Windows Defender Security Center app notifications from appearing on user endpoints
|
||||||
|
keywords: defender, security center, app, notifications, av, alerts
|
||||||
|
search.product: eADQiWindows 10XVcnh
|
||||||
|
ms.pagetype: security
|
||||||
|
ms.prod: w10
|
||||||
|
ms.mktglfcycl: manage
|
||||||
|
ms.sitesec: library
|
||||||
|
ms.pagetype: security
|
||||||
|
ms.localizationpriority: medium
|
||||||
|
author: iaanw
|
||||||
|
ms.author: iawilt
|
||||||
|
ms.date: 10/16/2017
|
||||||
|
---
|
||||||
|
|
||||||
|
# Hide Windows Defender Security Center app notifications
|
||||||
|
|
||||||
|
**Applies to**
|
||||||
|
|
||||||
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
**Audience**
|
||||||
|
|
||||||
|
- Enterprise security administrators
|
||||||
|
|
||||||
|
**Manageability available with**
|
||||||
|
|
||||||
|
- Group Policy
|
||||||
|
|
||||||
|
The Windows Defender Security Center app is used by a number of Windows security features to provide notifications about the health and security of the machine. These include notifications about firewalls, antivirus products, Windows Defender SmartScreen, and others.
|
||||||
|
|
||||||
|
In some cases, it may not be appropriate to show these notifications, for example, if you want to hide regular status updates, or if you want to hide all notifications to the employees in your organization.
|
||||||
|
|
||||||
|
There are two levels to hiding notifications:
|
||||||
|
|
||||||
|
1. Hide non-critical notifications, such as regular updates about the number of scans Windows Defender Antivirus ran in the past week
|
||||||
|
2. Hide all notifications
|
||||||
|
|
||||||
|
If you set **Hide all notifications** to **Enabled**, changing the **Hide non-critical notifications** setting will have no effect.
|
||||||
|
|
||||||
|
You can only use Group Policy to change these settings.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## Use Group Policy to hide non-critical notifications
|
||||||
|
|
||||||
|
You can hide notifications that describe regular events related to the health and security of the machine. These are notifications that do not require an action from the machine's user. It can be useful to hide these notifications if you find they are too numerours or you have other status reporting on a larger scale (such as Update Compliance or System Center Configuration Manager reporting).
|
||||||
|
|
||||||
|
This can only be done in Group Policy.
|
||||||
|
|
||||||
|
>[!IMPORTANT]
|
||||||
|
>### Requirements
|
||||||
|
>
|
||||||
|
>You must have Windows 10, version 1709 (the Fall Creators Update). The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings.
|
||||||
|
|
||||||
|
1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
|
||||||
|
|
||||||
|
3. In the **Group Policy Management Editor** go to **Computer configuration**.
|
||||||
|
|
||||||
|
4. Click **Policies** then **Administrative templates**.
|
||||||
|
|
||||||
|
5. Expand the tree to **Windows components > Windows Defender Security Center > Notifications**.
|
||||||
|
|
||||||
|
6. Open the **Hide non-critical notifications** setting and set it to **Enabled**. Click **OK**.
|
||||||
|
|
||||||
|
7. [Deploy the updated GPO as you normally do](https://msdn.microsoft.com/en-us/library/ee663280(v=vs.85).aspx).
|
||||||
|
|
||||||
|
|
||||||
|
## Use Group Policy to hide all notifications
|
||||||
|
|
||||||
|
You can hide all notifications that are sourced from the Windows Defender Security Center app. This may be useful if you don't want users of the machines from inadvertently modifying settings, running antivirus scans, or otherwise performing security-related actions without your input.
|
||||||
|
|
||||||
|
This can only be done in Group Policy.
|
||||||
|
|
||||||
|
>[!IMPORTANT]
|
||||||
|
>### Requirements
|
||||||
|
>
|
||||||
|
>You must have Windows 10, version 1709 (the Fall Creators Update). The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings.
|
||||||
|
|
||||||
|
1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
|
||||||
|
|
||||||
|
3. In the **Group Policy Management Editor** go to **Computer configuration**.
|
||||||
|
|
||||||
|
4. Click **Policies** then **Administrative templates**.
|
||||||
|
|
||||||
|
5. Expand the tree to **Windows components > Windows Defender Security Center > Notifications**.
|
||||||
|
|
||||||
|
6. Open the **Hide all notifications** setting and set it to **Enabled**. Click **OK**.
|
||||||
|
|
||||||
|
7. [Deploy the updated GPO as you normally do](https://msdn.microsoft.com/en-us/library/ee663280(v=vs.85).aspx).
|
@ -0,0 +1,56 @@
|
|||||||
|
---
|
||||||
|
title: Virus and threat protection in the Windows Defender Security Center app
|
||||||
|
description: Use the Virus & threat protection section to see and configure Windows Defender Antivirus, Controlled folder access, and 3rd-party AV products.
|
||||||
|
keywords: wdav, smartscreen, antivirus, wdsc, exploit, protection, hide
|
||||||
|
search.product: eADQiWindows 10XVcnh
|
||||||
|
ms.pagetype: security
|
||||||
|
ms.prod: w10
|
||||||
|
ms.mktglfcycl: manage
|
||||||
|
ms.sitesec: library
|
||||||
|
ms.pagetype: security
|
||||||
|
ms.localizationpriority: medium
|
||||||
|
author: iaanw
|
||||||
|
ms.author: iawilt
|
||||||
|
ms.date: 10/16/2017
|
||||||
|
---
|
||||||
|
|
||||||
|
|
||||||
|
# Virus and threat protection
|
||||||
|
|
||||||
|
**Applies to**
|
||||||
|
|
||||||
|
- Windows 10, version 1703 and later
|
||||||
|
|
||||||
|
|
||||||
|
The **Virus & threat protection** section contains information and settings for antivirus protection from Windows Defender Antivirus and third-party AV products. IT administrators and IT pros can get more information and documentation about configuration from the following:
|
||||||
|
|
||||||
|
- [Windows Defender Antivirus in the Windows Defender Security Center app](../windows-defender-antivirus/windows-defender-security-center-antivirus.md)
|
||||||
|
- [Windows Defender Antivirus documentation library](../windows-defender-antivirus/windows-defender-antivirus-in-windows-10.md)
|
||||||
|
|
||||||
|
In Windows 10, version 1709, the section also provides configuration options for Controlled folder access. IT administrators can get more information at the [Controlled folder access](../windows-defender-exploit-guard/controlled-folders-exploit-guard.md) topic in the Windows Defender Exploit Guard library.
|
||||||
|
|
||||||
|
You can also choose to hide the section from users of the machine. This can be useful if you don't want employees in your organization to see or have access to user-configured options for the features shown in the section.
|
||||||
|
|
||||||
|
|
||||||
|
## Hide the Virus & threat protection section
|
||||||
|
|
||||||
|
You can choose to hide the entire section by using Group Policy. The section will not appear on the home page of the Windows Defender Security Center app, and its icon will not be shown on the navigiation bar on the side of the app.
|
||||||
|
|
||||||
|
This can only be done in Group Policy.
|
||||||
|
|
||||||
|
>[!IMPORTANT]
|
||||||
|
>### Requirements
|
||||||
|
>
|
||||||
|
>You must have Windows 10, version 1709 (the Fall Creators Update). The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings.
|
||||||
|
|
||||||
|
1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
|
||||||
|
|
||||||
|
3. In the **Group Policy Management Editor** go to **Computer configuration**.
|
||||||
|
|
||||||
|
4. Click **Policies** then **Administrative templates**.
|
||||||
|
|
||||||
|
5. Expand the tree to **Windows components > Windows Defender Security Center > Virus and threat protection**.
|
||||||
|
|
||||||
|
6. Open the **Hide the Virus and threat protection area** setting and set it to **Enabled**. Click **OK**.
|
||||||
|
|
||||||
|
7. [Deploy the updated GPO as you normally do](https://msdn.microsoft.com/en-us/library/ee663280(v=vs.85).aspx).
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Windows Defender Security Center
|
title: The Windows Defender Security Center app
|
||||||
description: The Windows Defender Security Center app brings together common Windows security features into one place
|
description: The Windows Defender Security Center app brings together common Windows security features into one place
|
||||||
keywords: wdav, smartscreen, antivirus, wdsc, firewall, device health, performance, Edge, browser, family, parental options, security, windows
|
keywords: wdav, smartscreen, antivirus, wdsc, firewall, device health, performance, Edge, browser, family, parental options, security, windows
|
||||||
search.product: eADQiWindows 10XVcnh
|
search.product: eADQiWindows 10XVcnh
|
||||||
@ -11,65 +11,53 @@ ms.pagetype: security
|
|||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
author: iaanw
|
author: iaanw
|
||||||
ms.author: iawilt
|
ms.author: iawilt
|
||||||
ms.date: 10/04/2017
|
ms.date: 10/12/2017
|
||||||
---
|
---
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
# The Windows Defender Security Center
|
# The Windows Defender Security Center app
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
|
|
||||||
- Windows 10, version 1709
|
- Windows 10, version 1703 and later
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
In Windows 10, version 1703 we introduced the new Windows Defender Security Center app, which brings together common Windows security features into one easy-to-use app.
|
In Windows 10, version 1703 we introduced the new Windows Defender Security Center app, which brings together common Windows security features into one app. Many settings that were previously part of the individual features and main Windows Settings have been combined and moved to the new app, which is installed out-of-the-box as part of Windows 10, version 1703.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
In Windows 10, version 1709, we increased the scope of the app to also show information from third-party antivirus and firewall apps.
|
||||||
|
|
||||||
Many settings that were previously part of the individual features and main Windows Settings have been combined and moved to the new app, which is installed out-of-the-box as part of Windows 10, version 1703.
|
>[!NOTE]
|
||||||
|
>The Windows Defender Security Center app is a client interface on Windows 10, version 1703 and later. It is not the Windows Defender Security Center web portal console that is used to review and manage [Windows Defender Advanced Threat Protection](https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection).
|
||||||
|
|
||||||
The app includes the settings and status for the following security features:
|
This library describes the Windows defender Security Center app, and provides information on configuring certain features, inlcuding:
|
||||||
|
|
||||||
- Virus & threat protection, including settings for Windows Defender Antivirus and Controlled folder access
|
<a id="customize-notifications-from-the-windows-defender-security-center"></a>
|
||||||
- Device performance & health, which includes information about drivers, storage space, and general Windows Update issues
|
- [Showing and customizing contact information on the app and in notifications](wdsc-customize-contact-information.md)
|
||||||
- Firewall & network protection, including Windows Firewall
|
- [Hiding notifications](wdsc-hide-notifications.md)
|
||||||
- App & browser control, covering Windows Defender SmartScreen settings and Exploit protection mitigations
|
|
||||||
- Family options, which include a number of parental controls along with tips and information for keeping kids safe online
|
You can find more information about each section, including options for configuring the sections - such as hiding each of the sections - at the following topics:
|
||||||
|
|
||||||
|
|
||||||
|
- [Virus & threat protection](wdsc-virus-threat-protection.md), which has information and access to antivirus settings and the Controlled folder access feature of Windows Defender Exploit Guard
|
||||||
|
- [Device performance & health](wdsc-device-performance-health.md), which has information about drivers, storage space, and general Windows Update issues
|
||||||
|
- [Firewall & network protection](wdsc-firewall-network-protection.md), which has information and access to firewall settings, including Windows Defender Firewall
|
||||||
|
- [App & browser control](wdsc-app-browser-control.md), covering Windows Defender SmartScreen settings and Exploit protection mitigations
|
||||||
|
- [Family options](wdsc-family-options.md), which includes access to parental controls along with tips and information for keeping kids safe online
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
The Windows Defender Security Center app uses the [Security Center service](https://technet.microsoft.com/en-us/library/bb457154.aspx#EDAA) to provide the status and information on third-party antivirus and firewall products that are installed on the device.
|
|
||||||
|
|
||||||
|
|
||||||
>[!IMPORTANT]
|
|
||||||
>Windows Defender AV and the Windows Defender Security Center app use similarly named services for specific purposes.
|
|
||||||
>
|
|
||||||
>The Windows Defender Security Center app uses the Windows Defender Security Center Service (*SecurityHealthService* or *Windows Security Health Servce*), which in turn utilizes the Security Center service ([*wscsvc*](https://technet.microsoft.com/en-us/library/bb457154.aspx#EDAA)) to ensure the app provides the most up-to-date information about the protection status on the endpoint, including protection offered by third-party antivirus products, Windows Firewall, and other security protection.
|
|
||||||
>
|
|
||||||
>These services do not affect the state of Windows Defender AV. Disabling or modifying these services will not disable Windows Defender AV, and will lead to a lowered protection state on the endpoint, even if you are using a third-party antivirus product.
|
|
||||||
>
|
|
||||||
>Windows Defender AV will be [disabled automatically when a third-party antivirus product is installed and kept up to date](../windows-defender-antivirus/windows-defender-antivirus-compatibility.md).
|
|
||||||
>
|
|
||||||
>Disabling the Windows Security Center service will not disable Windows Defender AV or [Windows Firewall](https://docs.microsoft.com/en-us/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security).
|
|
||||||
|
|
||||||
> [!WARNING]
|
|
||||||
> If you disable the Security Center service, or configure its associated Group Policy settings to prevent it from starting or running, the Windows Defender Security Center app may display stale or inaccurate information about any antivirus or firewall products you have installed on the device.
|
|
||||||
>
|
|
||||||
>It may also prevent Windows Defender AV from enabling itself if you have an old or outdated third-party antivirus, or if you uninstall any third-party antivirus products you may have previously installed.
|
|
||||||
>
|
|
||||||
>This will significantly lower the protection of your device and could lead to malware infection.
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
@ -83,11 +71,31 @@ The Windows Defender Security Center app uses the [Security Center service](http
|
|||||||
|
|
||||||
|
|
||||||
> [!NOTE]
|
> [!NOTE]
|
||||||
> Settings configured with management tools, such as Group Policy, Microsoft Intune, or System Center Configuration Manager, will generally take precedence over the settings in the Windows Defender Security Center. Review the settings for each feature in its appropriate library. Links for both home user and enterprise or commercial audiences are listed below.
|
> Settings configured with management tools, such as Group Policy, Microsoft Intune, or System Center Configuration Manager, will generally take precedence over the settings in the Windows Defender Security Center. See the topics for each of the sections for links to configuring the associated features or products.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## How the Windows Defender Security Center app works with Windows security features
|
## How the Windows Defender Security Center app works with Windows security features
|
||||||
|
|
||||||
|
|
||||||
|
>[!IMPORTANT]
|
||||||
|
>Windows Defender AV and the Windows Defender Security Center app use similarly named services for specific purposes.
|
||||||
|
>
|
||||||
|
>The Windows Defender Security Center app uses the Windows Defender Security Center Service (*SecurityHealthService* or *Windows Security Health Servce*), which in turn utilizes the Security Center service ([*wscsvc*](https://technet.microsoft.com/en-us/library/bb457154.aspx#EDAA)) to ensure the app provides the most up-to-date information about the protection status on the endpoint, including protection offered by third-party antivirus products, Windows Defender Firewall, third-party firewalls, and other security protection.
|
||||||
|
>
|
||||||
|
>These services do not affect the state of Windows Defender AV. Disabling or modifying these services will not disable Windows Defender AV, and will lead to a lowered protection state on the endpoint, even if you are using a third-party antivirus product.
|
||||||
|
>
|
||||||
|
>Windows Defender AV will be [disabled automatically when a third-party antivirus product is installed and kept up to date](../windows-defender-antivirus/windows-defender-antivirus-compatibility.md).
|
||||||
|
>
|
||||||
|
>Disabling the Windows Security Center service will not disable Windows Defender AV or [Windows Defender Firewall](https://docs.microsoft.com/en-us/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security).
|
||||||
|
|
||||||
|
> [!WARNING]
|
||||||
|
> If you disable the Security Center service, or configure its associated Group Policy settings to prevent it from starting or running, the Windows Defender Security Center app may display stale or inaccurate information about any antivirus or firewall products you have installed on the device.
|
||||||
|
>
|
||||||
|
>It may also prevent Windows Defender AV from enabling itself if you have an old or outdated third-party antivirus, or if you uninstall any third-party antivirus products you may have previously installed.
|
||||||
|
>
|
||||||
|
>This will significantly lower the protection of your device and could lead to malware infection.
|
||||||
|
|
||||||
The Windows Defender Security Center app operates as a separate app or process from each of the individual features, and will display notifications through the Action Center.
|
The Windows Defender Security Center app operates as a separate app or process from each of the individual features, and will display notifications through the Action Center.
|
||||||
|
|
||||||
It acts as a collector or single place to see the status and perform some configuration for each of the features.
|
It acts as a collector or single place to see the status and perform some configuration for each of the features.
|
||||||
@ -97,71 +105,17 @@ Disabling any of the individual features (through Group Policy or other manageme
|
|||||||
> [!IMPORTANT]
|
> [!IMPORTANT]
|
||||||
> Individually disabling any of the services will not disable the other services or the Windows Defender Security Center app.
|
> Individually disabling any of the services will not disable the other services or the Windows Defender Security Center app.
|
||||||
|
|
||||||
For example, [using a third-party antivirus will disable Windows Defender Antivirus](https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-antivirus/deploy-manage-report-windows-defender-antivirus). However, the Windows Defender Security Center app will still run, show its icon in the taskbar, and display information about the other features, such as Windows Defender SmartScreen and Windows Firewall.
|
For example, [using a third-party antivirus will disable Windows Defender Antivirus](https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility). However, the Windows Defender Security Center app will still run, show its icon in the taskbar, and display information about the other features, such as Windows Defender SmartScreen and Windows Defender Firewall.
|
||||||
|
|
||||||
The presence of the third-party antivirus will be indicated under the **Virus & threat protection** section in the Windows Defender Security Center app.
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## More information
|
|
||||||
|
|
||||||
See the following links for more information on the features in the Windows Defender Security Center app:
|
|
||||||
- Windows Defender Antivirus
|
|
||||||
- IT administrators and IT pros can get configuration guidance from the [Windows Defender Antivirus in the Windows Defender Security Center topic](https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus) and the [Windows Defender Antivirus documentation library](https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10)
|
|
||||||
- Home users can learn more at the [Virus & threat protection in Windows Defender Security Center topic at support.microsoft.com](https://support.microsoft.com/en-us/help/4012987/windows-10-virus-threat-protection-windows-defender-security-center)
|
|
||||||
- Device performance & health
|
|
||||||
- It administrators and IT pros can [configure the Load and unload device drivers security policy setting](https://docs.microsoft.com/en-us/windows/device-security/security-policy-settings/load-and-unload-device-drivers), and learn how to [deploy drivers during Windows 10 deployment using System Center Configuration Manager](https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-sccm/add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager)
|
|
||||||
- Home users can learn more at the [Track your device and performance health in Windows Defender Security Center topic at support.microsoft.com](https://support.microsoft.com/en-us/help/4012986/windows-defender-track-your-device-performance-health)
|
|
||||||
- Windows Firewall
|
|
||||||
- IT administrators and IT pros can get configuration guidance from the [Windows Firewall with Advanced Security documentation library](https://docs.microsoft.com/en-us/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security)
|
|
||||||
- Home users can learn more at the [Firewall & network protection in Windows Defender Security Center topic at support.microsoft.com](https://support.microsoft.com/en-us/help/4012988/windows-10-firewall-network-protection-windows-defender-security-center)
|
|
||||||
- Windows Defender SmartScreen
|
|
||||||
- IT administrators and IT pros can get configuration guidance from the [Windows Defender SmartScreen documentation library](https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview)
|
|
||||||
- Home users can learn more at the [App & browser control in Windows Defender Security Center topic at support.microsoft.com](https://support.microsoft.com/en-us/help/4013218/windows-10-app-browser-control-in-windows-defender)
|
|
||||||
- Family options, which include a number of parental controls along with tips and information for keeping kids safe online
|
|
||||||
- Home users can learn more at the [Help protection your family online in Windows Defender Security Center topic at support.microsoft.com](https://support.microsoft.com/en-us/help/4013209/windows-10-protect-your-family-online-in-windows-defender)
|
|
||||||
|
|
||||||
## Customize notifications from the Windows Defender Security Center
|
|
||||||
|
|
||||||
You can customize notifcations so they show information to users about how to get more help from your organization's help desk.
|
|
||||||
|
|
||||||

|
|
||||||
|
|
||||||
This information will also appear as a pop-out window on the Windows Defender Security Center app.
|
|
||||||
|
|
||||||

|
|
||||||
|
|
||||||
Users can click on the displayed information to get more help:
|
|
||||||
- Clicking **Call** or the phone number will open Skype to start a call to the displayed number
|
|
||||||
- Clicking **Email** or the email address will create a new email in the machine's default email app address to the displayed email
|
|
||||||
- Clicking **Help portal** or the website URL will open the machine's default web browser and go to the displayed address
|
|
||||||
|
|
||||||
|
|
||||||
### Use Group Policy to customize the notification
|
|
||||||
|
|
||||||
1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
|
|
||||||
|
|
||||||
3. In the **Group Policy Management Editor** go to **Computer configuration**.
|
|
||||||
|
|
||||||
4. Click **Policies** then **Administrative templates**.
|
|
||||||
|
|
||||||
5. Expand the tree to **Windows components > Windows Defender Security Center > Enterprise Customization**.
|
|
||||||
|
|
||||||
6. Open the **Configure customized contact information** setting and set it to **Enabled**. Click **OK**.
|
|
||||||
|
|
||||||
7. Open the **Specify contact company name** setting and set it to **Enabled**. Enter your company or organization's name in the field in the **Options** section. Click **OK**.
|
|
||||||
|
|
||||||
8. To ensure the custom notification appear, you must also configure at least one of the following settings by opening them, setting them to **Enabled** and adding the contact information in the field under **Options**:
|
|
||||||
1. Specify contact email address of Email ID
|
|
||||||
2. Specify contact phone number or Skype ID
|
|
||||||
3. Specify contact website
|
|
||||||
|
|
||||||
9. Click **OK** after configuring each setting to save your changes.
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
>[!NOTE]
|
|
||||||
>The Windows Defender Security Center app is a client interface on Windows 10, version 1703. It is not the Windows Defender Security Center web portal that is used to review and manage [Windows Defender Advanced Threat Protection](https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection).
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user