Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 777971" data-attributes="member: 32260">Generally, you can use ConfigureDefender if the GPO policies related to WD and SmartScreen are set to &quot;Not configured&quot;. In many cases this also mean that WD security is activated (as in the case of Behavioral monitoring). If you will not do it, then ConfigureDefender settings will be overriden by GPO refresh feature (GPO policies will be applied).In your case you will probably want to change sometimes the WD Exploit Guard features which can be done much easier via ConfigureDefender.So, set all settings in the GPO tab &quot;Windows Defender Exploit Guard&quot; to&nbsp; Not configured. Next run ConfigureDefender and use it to set only WD Exploit Guard settings (ASR, Controlled Folder Access, Network Protection).All useful Defender settings are included in ConfigureDefender. Many GPO settings were skipped because they should not be changed (the proper setting is Not configured).</blockquote>

[QUOTE="Andy Ful, post: 777971, member: 32260"] Generally, you can use ConfigureDefender if the GPO policies related to WD and SmartScreen are set to "Not configured". In many cases this also mean that WD security is activated (as in the case of Behavioral monitoring). If you will not do it, then ConfigureDefender settings will be overriden by GPO refresh feature (GPO policies will be applied). In your case you will probably want to change sometimes the WD Exploit Guard features which can be done much easier via ConfigureDefender. So, set all settings in the GPO tab "Windows Defender Exploit Guard" to Not configured. Next run ConfigureDefender and use it to set only WD Exploit Guard settings (ASR, Controlled Folder Access, Network Protection). All useful Defender settings are included in ConfigureDefender. Many GPO settings were skipped because they should not be changed (the proper setting is Not configured). [/QUOTE]

Verification