Reply to thread

Message

<blockquote data-quote="manchesterunited" data-source="post: 858735" data-attributes="member: 85798">Whether or not Defender will be &quot;heavy&quot; depends upon the system.If you set Windows Defender via Configure Defender to &quot;maximum&quot; settings, then yes - it is going to block stuff that some users may want to use or do. Also, there will be a longer delay due to increasing the cloud query time.Yes, you are correct, in a certain respect. There is no way to lock a user out of Configure Defender. So they can go in and make changes to the settings that you&#039;ve enabled.As far as disabling remote desktop or SSH, then no... Configure Defender shouldn&#039;t break any of that. However, there is a more serious question of how you are configuring their firewalls so that you can remote into them. Using a Private profile, for example, is a no-no. Plus keeping remote access enabled on their systems so you can administer them only exposes those systems to a higher probability of network attack. You just shouldn&#039;t do it. However, that&#039;s a debate you can have with someone else.However, even [USER=32260]@Andy Ful[/USER] cannot guarantee that Microsoft will not come along and make some changes to Windows Defender or Windows Security and cause a breakage. Actually, you cannot make that guarantee for any security solution.</blockquote>

[QUOTE="manchesterunited, post: 858735, member: 85798"] Whether or not Defender will be "heavy" depends upon the system. If you set Windows Defender via Configure Defender to "maximum" settings, then yes - it is going to block stuff that some users may want to use or do. Also, there will be a longer delay due to increasing the cloud query time. Yes, you are correct, in a certain respect. There is no way to lock a user out of Configure Defender. So they can go in and make changes to the settings that you've enabled. As far as disabling remote desktop or SSH, then no... Configure Defender shouldn't break any of that. However, there is a more serious question of how you are configuring their firewalls so that you can remote into them. Using a Private profile, for example, is a no-no. Plus keeping remote access enabled on their systems so you can administer them only exposes those systems to a higher probability of network attack. You just shouldn't do it. However, that's a debate you can have with someone else. However, even [USER=32260]@Andy Ful[/USER] cannot guarantee that Microsoft will not come along and make some changes to Windows Defender or Windows Security and cause a breakage. Actually, you cannot make that guarantee for any security solution. [/QUOTE]

Verification