Reply to thread

Message

<blockquote data-quote="filx" data-source="post: 998540" data-attributes="member: 95818">Hello, i have a question. does ASR rules works if&nbsp; I have another antivirus installed? all ASR settings in DefenderUI are on as I want. On microsoft doc they say that i need live protection for ASR, but putting on the setting &#039; Limited periodic scanning (LPS)&#039; in microsoft Defender i managed to change DefenderUI setting. How can i see if it worked or it is a bug?[URL unfurl=&quot;true&quot;]https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/attack-surface-reduction-rules-deployment?view=o365-worldwide[/URL]<h3>ASR rules dependencies</h3>Microsoft Defender Antivirus must be enabled and configured as primary anti-virus solution, and must be in the following mode:<ul>
<li data-xf-list-type="ul">Primary antivirus/antimalware solution</li>
<li data-xf-list-type="ul">State: Active mode</li>
</ul>Microsoft Defender Antivirus must not be in any of the following modes:<ul>
<li data-xf-list-type="ul">Passive</li>
<li data-xf-list-type="ul">Passive Mode with Endpoint detection and response (EDR) in Block Mode</li>
<li data-xf-list-type="ul">Limited periodic scanning (LPS)</li>
<li data-xf-list-type="ul">Off</li>
</ul>Thanks in advance and excuse for my odd question <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" /></blockquote>

[QUOTE="filx, post: 998540, member: 95818"] Hello, i have a question. does ASR rules works if I have another antivirus installed? all ASR settings in DefenderUI are on as I want. On microsoft doc they say that i need live protection for ASR, but putting on the setting ' Limited periodic scanning (LPS)' in microsoft Defender i managed to change DefenderUI setting. How can i see if it worked or it is a bug? [URL unfurl="true"]https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/attack-surface-reduction-rules-deployment?view=o365-worldwide[/URL] [HEADING=2]ASR rules dependencies[/HEADING] Microsoft Defender Antivirus must be enabled and configured as primary anti-virus solution, and must be in the following mode: [LIST] [*]Primary antivirus/antimalware solution [*]State: Active mode [/LIST] Microsoft Defender Antivirus must not be in any of the following modes: [LIST] [*]Passive [*]Passive Mode with Endpoint detection and response (EDR) in Block Mode [*]Limited periodic scanning (LPS) [*]Off [/LIST] Thanks in advance and excuse for my odd question :) [/QUOTE]

Verification