Blog Post

Microsoft Defender for Endpoint Blog
4 MIN READ

Recovering from Attack Surface Reduction rule shortcut deletions

Scott Woodgate's avatar
Scott Woodgate
Icon for Microsoft rankMicrosoft
Jan 14, 2023
Updated 1/23/2023 @ 1:10pm PST   On January 13th, Windows Security and Microsoft Defender for Endpoint customers may have experienced a series of false positive detections for the Attack Surface ...
Updated Jan 23, 2023
Version 28.0
asimko's avatar
asimko
Copper Contributor
Jan 17, 2023

The released fix tool cannot restore shortcuts per profile sometimes.

 

[+] Starting restore of pinned taskbar shortcuts.
Can't restore shortcut C:\Users\<username>\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Edge.lnk. Restoring per profile shortcuts not supported
Successfully restored pinned taskbar shortcut file: C:\Users\<username>\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Edge.lnk
Can't restore shortcut C:\Users\<username>\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Outlook.lnk. Restoring per profile shortcuts not supported
Successfully restored pinned taskbar shortcut file: C:\Users\<username>\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Outlook.lnk
[+] Starting library.ms restore
Skipping restore of Pictures library shortcut. It already exists.
Successfully restored Documents library shortcut.
Skipping restore of Music library shortcut. It already exists.
Successfully restored SavedPictures library shortcut.
Successfully restored CameraRoll library shortcut.
Skipping restore of Videos library shortcut. It already exists.