Forum Discussion

MCT

Jan 13, 2023

Solved

Antivirus deletes all shortcuts from the desktop

After this morning's update of security intelligence to version 1.381.2140.0, defender is deleting on all clients all links to applications; does anyone have the same problem?

yongrheemsft
Jan 14, 2023
https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/recovering-from-attack-surface-reduction-rule-shortcut-deletions/ba-p/3716011

JimmyWork

Iron Contributor

Jan 13, 2023

micheleariis

We have the same issue and many more.
https://www.reddit.com/r/sysadmin/comments/10ar1vb/multiple_users_reporting_microsoft_apps_have/

Set the following ASR rule to Audit.

Block Win32 API calls from Office macros

Rule-ID 92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b

Then you can restore the links. Microsoft needs to fix this ASAP

cmcconnell1000

Copper Contributor

Jan 13, 2023

Has Microsoft made any comment

Dreamaker
MCT
Jan 13, 2023
Now there is the advisory on Service health in Microsoft365 Admin portal: Some users are unable to utilize the Application shortcuts on the Start menu and taskbar
MO497128, Last updated: January 13, 2023 12:57 PM
Estimated start time: January 13, 2023 12:43 PM