Enable scanning of removable drives during a full scan - remediation

Question

Hope someone can help I have got 103 laptops needing Enable scanning of removable drives during a full scan remediation. I have tried Intune policy and group policy but nothing has worked they still show in defender as having the vulnerability. Microsoft Support advised Intune policy is setup and working and is issue with defender, raise ticket for defender but have had no response.

Any ideas what I can try ?

matejklemencic · Answer

Hello&nbsp;GlynnMorgan&nbsp;&nbsp;Have you directly checked the setting on one of your devices? Please verify this value:Get-MpPreference | select DisableRemovableDriveScanningValue should be set to False.

glynnmorgan · Answer

Yes I have and get the below&nbsp;&nbsp;MatejKlemencic&nbsp;

matejklemencic · Answer

The setting appears to be correct. Is this specific device listed among the exposed devices in the recommendations?

glynnmorgan · Answer

Yes this device is listed as exposed&nbsp;MatejKlemencic&nbsp;

matejklemencic · Answer

Had a similar experience with one of the other security recommendations showing computers as exposed nevertheless the setting was setup correctly.&nbsp;In our case, the devices resolved the issue on their own without any changes to the settings from our side.&nbsp;I suggest waiting for a response to your ticket, as the settings appear to be configured correctly.

Forum Discussion

Enable scanning of removable drives during a full scan - remediation

Share

Resources