deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-15 23:07:23 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

remove optional

Browse Source
This commit is contained in:
jcaparas 2017-08-21 21:31:25 -07:00
parent 649bf2fcd5
commit fd7f2151a3
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
windows/threat-protection/windows-defender-atp/respond-machine-alerts-windows-defender-advanced-threat-protection.md
View File

@ -40,10 +40,10 @@ On Windows 10, version 1710 and above, you'll have additional control over the n
1. Select the machine that you want to isolate. You can select or search for a machine from any of the following views: 1. Select the machine that you want to isolate. You can select or search for a machine from any of the following views:
- **Dashboard** - Select the machine name from the Top machines with active alerts section. - **Dashboard** - Select the machine name from the Top machines with active alerts section.
- **Alerts queue** - Select the machine name beside the machine icon from the alerts queue. - **Alerts queue** - Select the machine name beside the machine icon from the alerts queue.
- **Machines list** - Select the machine name from the list of machines. - **Machines list** - Select the machine name from the list of machines.
- **Search box** - Select Machine from the drop-down menu and enter the machine name. - **Search box** - Select Machine from the drop-down menu and enter the machine name.
2. Open the **Actions** menu and select **Isolate machine**. 2. Open the **Actions** menu and select **Isolate machine**.
@ -53,17 +53,17 @@ On Windows 10, version 1710 and above, you'll have additional control over the n
[JOEY: ADD SCREENSHOT OF CONFIRMATION DIALOG BOX] [JOEY: ADD SCREENSHOT OF CONFIRMATION DIALOG BOX]
4. Type a comment (optional) and select **Yes** to take action on the machine. 4. Type a comment and select **Yes** to take action on the machine.
>[!NOTE] >[!NOTE]
>The machine will remain connected to the Windows Defender ATP service even if it is isolated from the network. If you've chosen to enable Outlook and Skype for Business communication, then you'll be able to communicate to the user while the machine is isolated. >The machine will remain connected to the Windows Defender ATP service even if it is isolated from the network. If you've chosen to enable Outlook and Skype for Business communication, then you'll be able to communicate to the user while the machine is isolated.
The Action center shows the submission information: The Action center shows the submission information:
![Image of machine isolation](images/atp-machine-isolation.png) ![Image of machine isolation](images/atp-machine-isolation.png)
- **Submission time** - Shows when the isolation action was submitted. - **Submission time** - Shows when the isolation action was submitted.
- **Submitting user** - Shows who submitted the action on the machine. You can view the comments provided by the user by selecting the information icon. - **Submitting user** - Shows who submitted the action on the machine. You can view the comments provided by the user by selecting the information icon.
- **Exceptions** - Indicates whether Outlook and Skype for Business exceptions were enabled. - **Exceptions** - Indicates whether Outlook and Skype for Business exceptions were enabled.
- **Status** - Indicates any pending actions or the results of completed actions. Additional indications will be provided if you've enabled Outlook and Skype for Business communication. - **Status** - Indicates any pending actions or the results of completed actions. Additional indications will be provided if you've enabled Outlook and Skype for Business communication.
When the isolation configuration is applied, a new event is reflected in the machine timeline. When the isolation configuration is applied, a new event is reflected in the machine timeline.