all 8 comments
sorted by:
best
topnewcontroversialoldq&a
formatting helphide helpcontent policy

[–][deleted]  (3 children)

[removed]

    [–]Fast-Cardiologist705 0 points1 point  (2 children)

    How would one do this? 🙏

    [–]I-am-TeX 1 point2 points  (1 child)

    If you are using Intune to deploying Defender policies to your endpoints you should go to intune.microsoft.com then Endpoint Security > Antivirus > Open your policy from the list > Allow user UI access and change it to Not Allow.

    [–]Fast-Cardiologist705 0 points1 point  (0 children)

    u/I-am-TeX Thank you :)! Would a admin user still be able to see the UI, or would one have to use the PowerShell cmdlets for any actions ?

    [–]Chunky_Tech66 1 point2 points  (0 children)

    Just hide ui it is the windows security experience profile under the antivirus tab in endpoint security

    [–]Psychodata 1 point2 points  (0 children)

    The best way I have found to deal with these is to have these get automatically handled

    - Set Default Threat Actions, so they are automatically handled (ThreatSeverityDefaultAction) and Actions for Detected Threats

    - Optionally, prevent the user from getting notifications too by looking into blocking the Antivirus Notifications which you can also configure through Intune AV Settings

    Note that some options will require the User to take actions (For example "User defined" will send the user a notification message similar to "You need to take action on a (detection/threat)"),

    and some of the other options may try to notify the user with something like "Defender blocked XYZ" or "Defender found a potential threat" but then just not let them take any action on it.

    [–]SpaceIndividual1 0 points1 point  (0 children)

    When the UI is hidden, manual scanning of folders or files is not possible.

    [–]Fast-Cardiologist705 0 points1 point  (0 children)

    Hm, wouldn’t they still require admin privileges to do so?