mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-15 02:13:43 +00:00
Update configure-automated-investigations-remediation.md
This commit is contained in:
@ -33,18 +33,16 @@ Automated investigation and remediation capabilities mimic the ideal steps that
|
||||
|
||||
[Learn more about automated investigation and remediation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/automated-investigations).
|
||||
|
||||
## Configure automated investigation and remediation capabilities
|
||||
|
||||
To configure automated investigation and remediation, you turn on the features, and then you set up device groups.
|
||||
|
||||
### Turn on automated investigation and remediation
|
||||
## Turn on automated investigation and remediation
|
||||
|
||||
1. As a global administrator or security administrator, go to the Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) and sign in.
|
||||
2. In the navigation pane, choose **Settings**.
|
||||
3. In the **General** section, select **Advanced features**.
|
||||
4. Turn on both **Automated Investigation** and **Automatically resolve alerts**.
|
||||
|
||||
### Set up device groups
|
||||
## Set up device groups
|
||||
|
||||
1. In the Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)), on the **Settings** page, under **Permissions**, select **Device groups**.
|
||||
2. Select **+ Add machine group**.
|
||||
|
Reference in New Issue
Block a user