Forum Discussion

pnlend's avatar
pnlend
Copper Contributor
Jun 10, 2020

Automatic corrections in Windows Def AV (through GPOs) VS AIR (automatic investigation and response)

Hello,

Can someone explain me how automatic remediations/upon approval actions work if the GPO "Specify threat alert levels at which default action should not be taken when detected" is active.

 

Does the alerts still display in Action Center if this GPO is active and set ?

What if the GPO is not active but users take actions in windows security center on local machine ?

 

thanks in advance

No RepliesBe the first to reply

Resources