Forum Discussion
dmarquesgn
Mar 13, 2023Iron Contributor
Restart Windows 10 and 11 from MDE
Hi, I need to be able to restart some Windows 10 and 11 due to the application of updates. Is it possible to force a Windows restart from the MDE interface or by any query? Thanks
cyb3rmik3
May 14, 2023Iron Contributor
Hello dmarquesgn,
while there is no restart option through the GUI of M365 Defender, you can try the following:
- Perform a live response at the endpoint of interest
- Create a powershell script containing "Restart-Computer -Force" command
- Upload it in the library
- Run the .ps1 script
If a user is logged in, you will probably see an error indicating "The system shutdown cannot be initiated because there are other users logged on to the computer.". Otherwise, the endpoint will restart.
If I have answered your question, please mark your post as Solved
If you like my response, please consider giving it a like