Windows Defender settings...

[Guest]

Hi Everyone,

I have a question about Windows Defender the final version for windows
xp. Under Tools ---> Options ---> Default actions. I put them to all
quarantine when it finds any alert items. But when I do a scan it still
prompts me what to do (with my default option already selected). Is there a
way to allow it just to do what I tell it to do, without asking the end user?
Also does it only remove high security threats without user intervention? I
would like to deploy among many users, that would not know what to do when
presented with this choice. Is there an enterprise version maybe, with a
console?

Thanks,
Ross

 

[Guest]

"when I do a scan"

Please clarify - automatic scan or manual scan?

 

[Guest]

Do you have the box checked that says to apply default actions during a scan?

 

[Guest]

Hmmm

Change defaults to Quarantine (maybe only the high stuff)
Change to automatic scan
Apply default actions to items detected during a scan

 

[Guest]

Here is what I personally perceive as a problem. WD default for high risk is
typically remove. If non system stuff is removed, such as pictures, media,
etc. then the Restore point can't bring it back, so I would recommend
Quarantine. Medium alerts could go either way (ignore or remove). So you
are forced to go with Quarantine again. I would not go with Quarantine for
the lower level alerts which usually would be ignored. I would suggest you
address the issues of WSUS and Enterprise Versions in a different thread.

 

[Guest]

Mr. Cat

I do have the "Apply default actions to intems detected during a scan",
"Automatically scan my computer" checked, Default actions all set to
quarantine. It seems like this is not an enterprise product? Meaning that I
cannot manadate what I would like it to do when it scans. In a corporate
environment I would not like to present the users with a "what to do
scenario" I would rather just have it quarantine it automatically, then
maybe just present itself to the user what it did, sort of like antivirus.
Is there also a way to management many computers using windows defender from
on Console?

Thanks,
Ross

 

[Guest]

I have some philosophical issues with quarantining everything. I prefer to
see the results of the scan and make my own determinations. I realize that
this might not be feasible in a corporate environment. I am not the best
person to answer your question about how WD deals with an Enterprise
environment. That is why I suggested you make a new thread. I think it
would be more productive. Also, your question has been answered in bits and
pieces in this forum and it would be nice to get a complete answer under a
single thread. I am sorry for passing the buck. I would pay particular
attention to any responses from Mr. Bill Sanderson, a long time contributor
to this newsgroup. it might be helpful to describe your corporate
environment.

 

[Guest]

Hello Ross,

Maybe you can use this:

http://www.microsoft.com/forefront/clientsecurity/default.mspx

Good luck
--

 

[Guest]

Sorry for the omission Mr Engel. Of course, your suggestions are also very
good.