Forum Discussion
david0K
May 17, 2024Copper Contributor
ASRs via Intune not working (only on Windows 11 Clients)
We have been using some ASR rules in our company for a longer period of time. We have set these up via Intune. Since we have been using Windows 11, we have had some problems with a few ASR rules. o...
Jordi_Koenderink
May 22, 2024Brass Contributor
Not sure what you're saying here. The ASR is showing as Off in the Advanced Hunting tab but you set it to On regardless? If so, what does your query look like?
david0K
May 24, 2024Copper Contributor
Yes, the notebooks are all in the same configuration group and all get the same settings.
On the Windows 10 devices, the three settings are set to Audit. On the Windows 11 devices, they are displayed as off.
See as an example a Win10 device and a Win11 device. The remaining settings are all the same.
See also the query in the screenshot.
an other query:
- Jordi_KoenderinkMay 25, 2024Brass Contributor
Are you sure the devices have had enough time to receive the ASR policy? Also, please show me a screen of the ASR.
- david0KJun 05, 2024Copper Contributor
Hi Jordi_Koenderink, sorry for the late reply.
We've had the szenario for over 2 months now. That means there has definitely been enough time.
We have set the ASR to All Devices via the Defender Baseline:
Scoped to All Devices:
- rahuljindalJun 05, 2024Bronze ContributorWhat is the policy compliance state of the baseline and on the devices in question? Are the devices Hybrid or Entra ID only?