Forum Discussion
Defender on Windows server only detects - not prevents
Hello, we noticed that on the Windows server Defender only detects things but doesn't block anything. Shouldn't it at least block something? Should we apply ASR rules to the server(all rules or som...
It may also be worth checking the 'Remediation Level' set for the Device Groups..
Settings -> Device Groups -> check if "No Automated Response" or "Semi-Approval' or 'Full-Remediation' enabled.
Also, worth testing ASR rules in Block Mode. Prefer to attempt this in pilot groups prior to all roll-out.
Full remediation is configured.
Looks like the only thing to do is ASR rules.
Thanks
